Oracle Vm Virtualbox vulnerabilities
417 known vulnerabilities affecting oracle/vm_virtualbox.
Total CVEs
417
CISA KEV
1
actively exploited
Public exploits
21
Exploited in wild
1
Severity breakdown
CRITICAL5HIGH195MEDIUM165LOW52
Vulnerabilities
Page 1 of 21
CVE-2026-35242HIGHCVSS 7.5v7.2.62026-04-21
CVE-2026-35242 [HIGH] CWE-284 CVE-2026-35242: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM
nvd
CVE-2026-35251HIGHCVSS 7.5v7.2.62026-04-21
CVE-2026-35251 [HIGH] CWE-284 CVE-2026-35251: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM
nvd
CVE-2026-35230HIGHCVSS 7.5v7.2.62026-04-21
CVE-2026-35230 [HIGH] CWE-284 CVE-2026-35230: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM
nvd
CVE-2026-35246HIGHCVSS 7.5v7.2.62026-04-21
CVE-2026-35246 [HIGH] CWE-284 CVE-2026-35246: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM
nvd
CVE-2026-35245HIGHCVSS 7.5v7.2.62026-04-21
CVE-2026-35245 [HIGH] CWE-284 CVE-2026-35245: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via RDP to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cau
nvd
CVE-2026-35248MEDIUMCVSS 5.0v7.2.62026-04-21
CVE-2026-35248 [MEDIUM] CWE-284 CVE-2026-35248: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle
nvd
CVE-2026-35247MEDIUMCVSS 6.0v7.2.62026-04-21
CVE-2026-35247 [MEDIUM] CWE-284 CVE-2026-35247: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM
nvd
CVE-2026-35249LOWCVSS 3.2v7.2.62026-04-21
CVE-2026-35249 [LOW] CWE-284 CVE-2026-35249: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM Vi
nvd
CVE-2026-35250LOWCVSS 2.3v7.2.62026-04-21
CVE-2026-35250 [LOW] CWE-284 CVE-2026-35250: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability c
nvd
CVE-2026-21984HIGHCVSS 7.5v7.1.14v7.2.42026-01-20
CVE-2026-21984 [HIGH] CWE-284 CVE-2026-21984: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is i
nvd
CVE-2026-21989HIGHCVSS 8.1v7.1.14v7.2.42026-01-20
CVE-2026-21989 [HIGH] CVE-2026-21989: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle V
nvd
CVE-2026-21955HIGHCVSS 8.2v7.1.14v7.2.42026-01-20
CVE-2026-21955 [HIGH] CWE-400 CVE-2026-21955: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in
nvd
CVE-2026-21983HIGHCVSS 7.5v7.1.14v7.2.42026-01-20
CVE-2026-21983 [HIGH] CWE-269 CVE-2026-21983: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is i
nvd
CVE-2026-21990HIGHCVSS 8.2v7.1.14v7.2.42026-01-20
CVE-2026-21990 [HIGH] CVE-2026-21990: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle V
nvd
CVE-2026-21987HIGHCVSS 8.2v7.1.14v7.2.42026-01-20
CVE-2026-21987 [HIGH] CVE-2026-21987: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle V
nvd
CVE-2026-21956HIGHCVSS 8.2v7.1.14v7.2.42026-01-20
CVE-2026-21956 [HIGH] CWE-400 CVE-2026-21956: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in
nvd
CVE-2026-21988HIGHCVSS 8.2v7.1.14v7.2.42026-01-20
CVE-2026-21988 [HIGH] CVE-2026-21988: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle V
nvd
CVE-2026-21957HIGHCVSS 7.5v7.1.14v7.2.42026-01-20
CVE-2026-21957 [HIGH] CWE-269 CVE-2026-21957: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is i
nvd
CVE-2026-21986HIGHCVSS 7.1v7.1.14v7.2.42026-01-20
CVE-2026-21986 [HIGH] CVE-2026-21986: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle V
nvd
CVE-2026-21982MEDIUMCVSS 6.4v7.1.14v7.2.42026-01-20
CVE-2026-21982 [MEDIUM] CWE-284 CVE-2026-21982: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle VM VirtualBox executes to compromise Or
nvd
1 / 21Next →