Oracle Vm Virtualbox vulnerabilities
430 known vulnerabilities affecting oracle/vm_virtualbox.
Total CVEs
430
CISA KEV
1
actively exploited
Public exploits
21
Exploited in wild
1
Severity breakdown
CRITICAL5HIGH201MEDIUM170LOW54
Vulnerabilities
Page 10 of 22
CVE-2020-2702P4HIGHCVSS 7.5≥ 5.2.0, < 5.2.36≥ 6.0.0, < 6.0.16+1 more2020-01-15
CVE-2020-2702 [HIGH] CVE-2020-2702: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppor
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Whi
nvd
CVE-2020-2958P4HIGHCVSS 7.5fixed in 5.2.40≥ 6.0.0, < 6.0.20+1 more2020-04-15
CVE-2020-2958 [HIGH] CVE-2020-2958: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppor
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Whi
nvd
CVE-2020-2726P4HIGHCVSS 7.5≥ 5.2.0, < 5.2.36≥ 6.0.0, < 6.0.16+1 more2020-01-15
CVE-2020-2726 [HIGH] CVE-2020-2726: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppor
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Whi
nvd
CVE-2019-2679P4HIGHCVSS 7.3fixed in 5.2.28≥ 6.0.0, < 6.0.62019-04-23
CVE-2019-2679 [HIGH] CVE-2019-2679: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). S
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerab
nvd
CVE-2025-21571P4HIGHCVSS 7.3≥ 7.0.0, < 7.0.24≥ 7.1.0, < 7.1.62025-01-21
CVE-2025-21571 [HIGH] CWE-732 CVE-2025-21571: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.24 and prior to 7.1.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vul
nvd
CVE-2024-21109P4MEDIUMCVSS 5.9fixed in 7.0.162024-04-16
CVE-2024-21109 [MEDIUM] CVE-2024-21109: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized access t
nvd
CVE-2026-47050P4HIGHCVSS 7.4v7.2.82026-07-21
CVE-2026-47050 [HIGH] CWE-284 CVE-2026-47050: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interactio
nvd
CVE-2016-5545P4MEDIUMCVSS 6.3≥ 5.0.0, < 5.0.32≥ 5.1.0, < 5.1.14+2 more2017-01-27
CVE-2016-5545 [MEDIUM] CWE-254 CVE-2016-5545: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: GUI). Su
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: GUI). Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle VM VirtualBox. Successful attacks require human int
nvd
CVE-2013-3792P4LOWCVSS 3.8PoC≤ 4.2.16v4.2.0+57 more2013-10-16
CVE-2013-3792 [LOW] CVE-2013-3792: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.18, 4.0.20, 4.1.28, and 4.2.18 allows local users to affect availability via unknown vectors related to Core.
nvd
CVE-2017-3290P4HIGHCVSS 7.9v5.0.30v5.1.12+2 more2017-01-27
CVE-2017-3290 [HIGH] CVE-2017-3290: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Shared F
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Shared Folder). Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualB
nvd
CVE-2017-10233P4HIGHCVSS 7.3≤ 5.1.222017-08-08
CVE-2017-10233 [HIGH] CVE-2017-10233: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). T
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Orac
nvd
CVE-2020-2913P4HIGHCVSS 7.0fixed in 6.0.20≥ 6.1.0, < 6.1.62020-04-15
CVE-2020-2913 [HIGH] CVE-2020-2913: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppor
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.0.20 and prior to 6.1.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of
nvd
CVE-2020-2914P4HIGHCVSS 7.0fixed in 6.0.20≥ 6.1.0, < 6.1.62020-04-15
CVE-2020-2914 [HIGH] CVE-2020-2914: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppor
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.0.20 and prior to 6.1.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of
nvd
CVE-2021-2454P4HIGHCVSS 7.0fixed in 6.1.242021-07-21
CVE-2021-2454 [HIGH] CVE-2021-2454: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The su
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.24. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerabilit
nvd
CVE-2016-3612P4MEDIUMCVSS 5.9≤ 5.0.202016-07-21
CVE-2016-3612 [MEDIUM] CVE-2016-3612: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.22 allows remote attackers to affect confidentiality via vectors related to Core.
nvd
CVE-2025-61759P4MEDIUMCVSS 6.5v7.1.12v7.2.22025-10-21
CVE-2025-61759 [MEDIUM] CWE-269 CVE-2025-61759: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in
nvd
CVE-2026-60158P4MEDIUMCVSS 6.4v7.2.122026-07-21
CVE-2026-60158 [MEDIUM] CWE-284 CVE-2026-60158: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM
nvd
CVE-2019-2944P4HIGHCVSS 7.3≥ 5.2.0, < 5.2.34≥ 6.0.0, < 6.0.142019-10-16
CVE-2019-2944 [HIGH] CVE-2019-2944: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppor
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.34 and prior to 6.0.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerabili
nvd
CVE-2021-2443P4HIGHCVSS 7.3fixed in 6.1.242021-07-21
CVE-2021-2443 [HIGH] CVE-2021-2443: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The su
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM
nvd
CVE-2026-21982P4MEDIUMCVSS 6.4v7.1.14v7.2.42026-01-20
CVE-2026-21982 [MEDIUM] CWE-284 CVE-2026-21982: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle VM VirtualBox executes to compromise Ora
nvd