CVE-2016-0678

published 2016-04-21

CVE-2016-0678: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.18 allows local users to affect confidentiality…

Priority P4 23 medium 6.7 CVSS 3.0

AV L AC H PR L UI R S U C H I H A H

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.18 allows local users to affect confidentiality, integrity, and availability via vectors related to Core.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
debian	virtualbox	< virtualbox 5.0.18-dfsg-1 (sid)	virtualbox 5.0.18-dfsg-1 (sid)
oracle	vm_virtualbox	—	—
sun	virtualbox	>= 0 < 5.0.18-dfsg-1	5.0.18-dfsg-1

CVSS provenance

nvd v3.0 6.7 MEDIUM CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

nvd v2.0 4.1 MEDIUM AV:L/AC:M/Au:S/C:P/I:P/A:P

osv 6.7 MEDIUM

vendor_debian 6.7 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.