cbcvebase.

Oracle Vm Virtualbox vulnerabilities

483 known vulnerabilities affecting oracle/vm_virtualbox.

Total CVEs
483
CISA KEV
1
actively exploited
Public exploits
21
Exploited in wild
1
Severity breakdown
CRITICAL5HIGH221MEDIUM195LOW62

Vulnerabilities

Page 17 of 25
CVE-2020-14703P4MEDIUMCVSS 6.0fixed in 5.2.44≥ 6.0.0, < 6.0.24+1 more2020-07-15
CVE-2020-14703 [MEDIUM] CWE-908 CVE-2020-14703: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppor Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM Virt
nvd
CVE-2020-14629P4MEDIUMCVSS 6.0fixed in 5.2.44≥ 6.0.0, < 6.0.24+1 more2020-07-15
CVE-2020-14629 [MEDIUM] CVE-2020-14629: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppor Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.
nvd
CVE-2022-39423P4MEDIUMCVSS 6.0fixed in 6.1.382022-10-18
CVE-2022-39423 [MEDIUM] CVE-2022-39423: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppor Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.38. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle
nvd
CVE-2025-53026P4MEDIUMCVSS 6.0v7.1.102025-07-15
CVE-2025-53026 [MEDIUM] CWE-269 CVE-2025-53026: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.1.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM
nvd
CVE-2025-53025P4MEDIUMCVSS 6.0v7.1.102025-07-15
CVE-2025-53025 [MEDIUM] CWE-269 CVE-2025-53025: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.1.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM
nvd
CVE-2025-53030P4MEDIUMCVSS 6.0v7.1.102025-07-15
CVE-2025-53030 [MEDIUM] CWE-269 CVE-2025-53030: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.1.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM
nvd
CVE-2026-46825P4MEDIUMCVSS 6.0v7.2.82026-06-17
CVE-2026-46825 [MEDIUM] CWE-284 CVE-2026-46825: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device). The supported version that is affected is 7.2.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in
nvd
CVE-2016-0495P4MEDIUMCVSS 4.3≥ 4.0.0, < 4.3.36≥ 5.0.0, < 5.0.142016-01-21
CVE-2016-0495 [MEDIUM] CVE-2016-0495: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.36 and 5.0.14 allows remote attackers to affect availability via unknown vectors related to Core.
nvd
CVE-2017-10235P4MEDIUMCVSS 6.7≤ 5.1.222017-08-08
CVE-2017-10235 [MEDIUM] CVE-2017-10235: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). T Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in O
nvd
CVE-2021-2131P4MEDIUMCVSS 6.0fixed in 6.1.182021-01-20
CVE-2021-2131 [MEDIUM] CVE-2021-2131: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The su Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle V
nvd
CVE-2021-2120P4MEDIUMCVSS 6.0fixed in 6.1.182021-01-20
CVE-2021-2120 [MEDIUM] CVE-2021-2120: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The su Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle V
nvd
CVE-2020-2727P4MEDIUMCVSS 6.0≥ 5.2.0, < 5.2.36≥ 6.0.0, < 6.0.16+1 more2020-01-15
CVE-2020-2727 [MEDIUM] CVE-2020-2727: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppor Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Whi
nvd
CVE-2020-14889P4MEDIUMCVSS 6.0fixed in 6.1.162020-10-21
CVE-2020-14889 [MEDIUM] CVE-2020-14889: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The su Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle
nvd
CVE-2021-2266P4MEDIUMCVSS 6.0fixed in 6.1.202021-04-22
CVE-2021-2266 [MEDIUM] CVE-2021-2266: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The su Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle V
nvd
CVE-2021-2306P4MEDIUMCVSS 6.0fixed in 6.1.202021-04-22
CVE-2021-2306 [MEDIUM] CVE-2021-2306: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The su Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle V
nvd
CVE-2023-21989P4MEDIUMCVSS 6.0fixed in 6.1.44≥ 7.0.0, < 7.0.82023-04-18
CVE-2023-21989 [MEDIUM] CVE-2023-21989: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.44 and Prior to 7.0.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerabi
nvd
CVE-2023-22002P4MEDIUMCVSS 6.0fixed in 6.1.44≥ 7.0.0, < 7.0.82023-04-18
CVE-2023-22002 [MEDIUM] CVE-2023-22002: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.44 and Prior to 7.0.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerabi
nvd
CVE-2026-47044P4MEDIUMCVSS 5.5v7.2.122026-07-21
CVE-2026-47044 [MEDIUM] CWE-400 CVE-2026-47044: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability
nvd
CVE-2026-47062P4MEDIUMCVSS 5.5v7.2.122026-07-21
CVE-2026-47062 [MEDIUM] CWE-284 CVE-2026-47062: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability
nvd
CVE-2026-71132P4MEDIUMCVSS 5.3v7.2.142026-08-18
CVE-2026-71132 [MEDIUM] CWE-284 CVE-2026-71132: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle V
nvd
← Previous17 / 25Next →