Introduction VMSA-2024-0012 is not a new advisory. It was originally published in 2024 and, at the time, clearly communicated the severity of the underlying issues. Many organizations reviewed it, assessed impact, and made decisions based on their patching cycles, operational constraints, or perceived exposure. What has changed is not the technical nature of the vulnerabilities, but the context in which they now exist. In January 2026, Broadcom updated the advisory to confir