Oracle Vm Virtualbox vulnerabilities
430 known vulnerabilities affecting oracle/vm_virtualbox.
Total CVEs
430
CISA KEV
1
actively exploited
Public exploits
21
Exploited in wild
1
Severity breakdown
CRITICAL5HIGH201MEDIUM170LOW54
Vulnerabilities
Page 18 of 22
CVE-2021-2111P4MEDIUMCVSS 6.0fixed in 6.1.182021-01-20
CVE-2021-2111 [MEDIUM] CVE-2021-2111: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The su
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle V
nvd
CVE-2021-2442P4MEDIUMCVSS 6.0fixed in 6.1.242021-07-21
CVE-2021-2442 [MEDIUM] CVE-2021-2442: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The su
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle V
nvd
CVE-2017-10428P4MEDIUMCVSS 5.0≤ 5.1.282017-10-19
CVE-2017-10428 [MEDIUM] CVE-2017-10428: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). T
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.30. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in
nvd
CVE-2014-2487P4MEDIUMCVSS 6.9≥ 3.2.0, < 3.2.24≥ 4.0, < 4.0.26+3 more2014-07-17
CVE-2014-2487 [MEDIUM] CVE-2014-2487: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.14, when running on Windows, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-4261.
nvd
CVE-2014-4261P4MEDIUMCVSS 6.9≤ 4.0.24v4.0+62 more2014-07-17
CVE-2014-4261 [MEDIUM] CVE-2014-4261: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.14 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-2487.
nvd
CVE-2015-2594P4MEDIUMCVSS 6.6≥ 4.0.0, < 4.0.32≥ 4.1.0, < 4.1.40+2 more2015-07-16
CVE-2015-2594 [MEDIUM] CVE-2015-2594: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4.0.32, 4.1.40, 4.2.32, and 4.3.30 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core.
nvd
CVE-2016-5608P4MEDIUMCVSS 5.5≥ 5.0.0, < 5.0.28≥ 5.1.0, < 5.1.82016-10-25
CVE-2016-5608 [MEDIUM] CWE-284 CVE-2016-5608: Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8
Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect availability via vectors related to Core, a different vulnerability than CVE-2016-5613.
nvd
CVE-2020-14707P4MEDIUMCVSS 5.0fixed in 5.2.44≥ 6.0.0, < 6.0.24+1 more2020-07-15
CVE-2020-14707 [MEDIUM] CVE-2020-14707: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppor
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. S
nvd
CVE-2015-5307P4MEDIUMCVSS 4.9≥ 4.0.0, ≤ 4.0.34≥ 4.1.0, ≤ 4.1.42+3 more2015-11-16
CVE-2015-5307 [MEDIUM] CWE-399 CVE-2015-5307: The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS us
The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #AC (aka Alignment Check) exceptions, related to svm.c and vmx.c.
nvd
CVE-2010-4414P4MEDIUMCVSS 6.8v4.02011-01-19
CVE-2010-4414 [MEDIUM] CVE-2010-4414: Unspecified vulnerability in Oracle VM VirtualBox 4.0 allows local users to affect confidentiality,
Unspecified vulnerability in Oracle VM VirtualBox 4.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Extensions.
nvd
CVE-2016-3597P4MEDIUMCVSS 5.5≤ 5.0.242016-07-21
CVE-2016-3597 [MEDIUM] CVE-2016-3597: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.26 allows local users to affect availability via vectors related to Core.
nvd
CVE-2021-2125P4MEDIUMCVSS 4.6fixed in 6.1.182021-01-20
CVE-2021-2125 [MEDIUM] CVE-2021-2125: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The su
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle V
nvd
CVE-2023-22001P4MEDIUMCVSS 4.6fixed in 6.1.44≥ 7.0.0, < 7.0.82023-04-18
CVE-2023-22001 [MEDIUM] CVE-2023-22001: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.44 and Prior to 7.0.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerabi
nvd
CVE-2023-21998P4MEDIUMCVSS 4.6fixed in 6.1.44≥ 7.0.0, < 7.0.82023-04-18
CVE-2023-21998 [MEDIUM] CVE-2023-21998: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.44 and Prior to 7.0.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerabi
nvd
CVE-2023-22000P4MEDIUMCVSS 4.6fixed in 6.1.44≥ 7.0.0, < 7.0.82023-04-18
CVE-2023-22000 [MEDIUM] CVE-2023-22000: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.44 and Prior to 7.0.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerabi
nvd
CVE-2026-21981P4MEDIUMCVSS 4.6v7.1.14v7.2.42026-01-20
CVE-2026-21981 [MEDIUM] CWE-269 CVE-2026-21981: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in
nvd
CVE-2011-2305P4MEDIUMCVSS 6.2v3.0v3.1+2 more2011-07-21
CVE-2011-2305 [MEDIUM] CVE-2011-2305: Unspecified vulnerability in Oracle VM VirtualBox 4.0 allows local users to affect confidentiality,
Unspecified vulnerability in Oracle VM VirtualBox 4.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors.
nvd
CVE-2017-10187P4MEDIUMCVSS 4.6≤ 5.1.222017-08-08
CVE-2017-10187 [MEDIUM] CVE-2017-10187: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). T
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in O
nvd
CVE-2016-5611P4MEDIUMCVSS 4.3≥ 5.0.0, < 5.0.28≥ 5.1.0, < 5.1.82016-10-25
CVE-2016-5611 [MEDIUM] CWE-200 CVE-2016-5611: Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8
Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect confidentiality via vectors related to Core.
nvd
CVE-2016-5613P4MEDIUMCVSS 4.3≥ 5.0.0, < 5.0.28≥ 5.1.0, < 5.1.82016-10-25
CVE-2016-5613 [MEDIUM] CVE-2016-5613: Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8
Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect availability via vectors related to Core, a different vulnerability than CVE-2016-5608.
nvd