cbcvebase.

Debian Virtualbox vulnerabilities

389 known vulnerabilities affecting debian/virtualbox.

Total CVEs
389
CISA KEV
0
Public exploits
20
Exploited in wild
0
Severity breakdown
CRITICAL3HIGH191MEDIUM149LOW46

Vulnerabilities

Page 2 of 20
CVE-2023-22018P3HIGHCVSS 8.1fixed in virtualbox 7.0.10-dfsg-1 (sid)2023
CVE-2023-22018 [HIGH] CVE-2023-22018: virtualbox - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.46 and Prior to 7.0.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via RDP to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in takeove
debian
CVE-2022-39424P3HIGHCVSS 8.1fixed in virtualbox 6.1.40-dfsg-1 (sid)2022
CVE-2022-39424 [HIGH] CVE-2022-39424: virtualbox - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.40. Difficult to exploit vulnerability allows unauthenticated attacker with network access via VRDP to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in takeover of Oracle VM Virt
debian
CVE-2023-21886P3HIGHCVSS 8.1fixed in virtualbox 7.0.6-dfsg-1 (sid)2023
CVE-2023-21886 [HIGH] CVE-2023-21886: virtualbox - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.42 and prior to 7.0.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can res
debian
CVE-2014-0981P4MEDIUMCVSS 4.4PoCfixed in virtualbox 4.3.10-dfsg-1 (sid)2014
CVE-2014-0981 [MEDIUM] CVE-2014-0981: virtualbox - VBox/GuestHost/OpenGL/util/net.c in Oracle VirtualBox before 3.2.22, 4.0.x befor... VBox/GuestHost/OpenGL/util/net.c in Oracle VirtualBox before 3.2.22, 4.0.x before 4.0.24, 4.1.x before 4.1.32, 4.2.x before 4.2.24, and 4.3.x before 4.3.8, when using 3D Acceleration allows local guest OS users to execute arbitrary code on the Chromium server via crafted Chromium network pointer in a (1) CR_MESSAGE_READBACK or (2) CR_MESSAGE_WRITEBACK message to
debian
CVE-2022-39426P3HIGHCVSS 8.1fixed in virtualbox 6.1.40-dfsg-1 (sid)2022
CVE-2022-39426 [HIGH] CVE-2022-39426: virtualbox - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.40. Difficult to exploit vulnerability allows unauthenticated attacker with network access via VRDP to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in takeover of Oracle VM Virt
debian
CVE-2018-3294P3CRITICALCVSS 9.0fixed in virtualbox 5.2.20-dfsg-1 (sid)2018
CVE-2018-3294 [CRITICAL] CVE-2018-3294: virtualbox - Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (su... Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows low privileged attacker with network access via VRDP to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the at
debian
CVE-2024-21115P3HIGHCVSS 8.8fixed in virtualbox 7.0.16-dfsg-1 (sid)2024
CVE-2024-21115 [HIGH] CVE-2024-21115: virtualbox - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM Virt
debian
CVE-2020-2959P3HIGHCVSS 8.6fixed in virtualbox 6.1.6-dfsg-1 (sid)2020
CVE-2020-2959 [HIGH] CVE-2020-2959: virtualbox - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via MLD to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox
debian
CVE-2024-21114P3HIGHCVSS 8.8fixed in virtualbox 7.0.16-dfsg-1 (sid)2024
CVE-2024-21114 [HIGH] CVE-2024-21114: virtualbox - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM Virt
debian
CVE-2024-21112P3HIGHCVSS 8.8fixed in virtualbox 7.0.16-dfsg-1 (sid)2024
CVE-2024-21112 [HIGH] CVE-2024-21112: virtualbox - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM Virt
debian
CVE-2024-21113P3HIGHCVSS 8.8fixed in virtualbox 7.0.16-dfsg-1 (sid)2024
CVE-2024-21113 [HIGH] CVE-2024-21113: virtualbox - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM Virt
debian
CVE-2014-2477P4LOWCVSS 3.6PoCfixed in virtualbox 4.3.12-dfsg-1 (sid)2014
CVE-2014-2477 [LOW] CVE-2014-2477: virtualbox - Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtua... Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect integrity and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-2486. Scope: local sid: resolved (fixed in 4.3.12-dfsg-1)
debian
CVE-2019-2723P3HIGHCVSS 8.8fixed in virtualbox 6.0.6-dfsg-1 (sid)2019
CVE-2019-2723 [HIGH] CVE-2019-2723: virtualbox - Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (su... Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerabilit
debian
CVE-2019-2722P3HIGHCVSS 8.8fixed in virtualbox 6.0.6-dfsg-1 (sid)2019
CVE-2019-2722 [HIGH] CVE-2019-2722: virtualbox - Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (su... Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerabilit
debian
CVE-2019-3028P3HIGHCVSS 8.8fixed in virtualbox 6.0.14-dfsg-1 (sid)2019
CVE-2019-3028 [HIGH] CVE-2019-3028: virtualbox - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.34 and prior to 6.0.14. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is
debian
CVE-2020-2902P3HIGHCVSS 8.8fixed in virtualbox 6.1.6-dfsg-1 (sid)2020
CVE-2020-2902 [HIGH] CVE-2020-2902: virtualbox - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the
debian
CVE-2019-2703P3HIGHCVSS 8.8fixed in virtualbox 6.0.6-dfsg-1 (sid)2019
CVE-2019-2703 [HIGH] CVE-2019-2703: virtualbox - Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (su... Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerabilit
debian
CVE-2019-2680P3HIGHCVSS 8.8fixed in virtualbox 6.0.6-dfsg-1 (sid)2019
CVE-2019-2680 [HIGH] CVE-2019-2680: virtualbox - Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (su... Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerabilit
debian
CVE-2019-2696P3HIGHCVSS 8.8fixed in virtualbox 6.0.6-dfsg-1 (sid)2019
CVE-2019-2696 [HIGH] CVE-2019-2696: virtualbox - Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (su... Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerabilit
debian
CVE-2019-2656P3HIGHCVSS 8.8fixed in virtualbox 6.0.6-dfsg-1 (sid)2019
CVE-2019-2656 [HIGH] CVE-2019-2656: virtualbox - Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (su... Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerabilit
debian
Debian Virtualbox vulnerabilities | cvebase