VMware, Red Hat, and GitLab Issue Critical Security Patches for CVE-2024-38812 and CVSS 10.0 Vulnerabilities

VMware has issued patches for critical vulnerabilities in its vCenter Server and Cloud Foundation, addressing remote make-me-root and remote code execution flaws identified as CVE-2024-38812, which has a severity score of 9.8. These vulnerabilities could allow cybercriminals to exploit systems with crafted packets. Additionally, Red Hat OpenShift has critical flaws identified as CVE-2024-45496 (CVSS 9.9) and CVE-2024-7387 (CVSS 9.1). GitLab has also released urgent patches for a CVSS 10.0 vulnerability in both its Community Edition (CE) and Enterprise Edition (EE) versions, targeting a flaw in the ruby-saml library that could enable an authentication bypass. Another critical GitLab vulnerability, CVE-2024-45409, has also been patched.