cbcvebase.

Oracle Vm Virtualbox vulnerabilities

483 known vulnerabilities affecting oracle/vm_virtualbox.

Total CVEs
483
CISA KEV
1
actively exploited
Public exploits
21
Exploited in wild
1
Severity breakdown
CRITICAL5HIGH221MEDIUM195LOW62

Vulnerabilities

Page 24 of 25
CVE-2014-6588P4LOWCVSS 3.2≤ 4.3.182015-01-21
CVE-2014-6588 [LOW] CVE-2014-6588: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6589, CVE-2014-6590, CVE-2014-6595, and CVE-2015-0427.
nvd
CVE-2014-6595P4LOWCVSS 3.2≤ 4.3.182015-01-21
CVE-2014-6595 [LOW] CVE-2014-6595: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6588, CVE-2014-6589, CVE-2014-6590, and CVE-2015-0427.
nvd
CVE-2023-21991P4LOWCVSS 3.2fixed in 6.1.44≥ 7.0.0, < 7.0.82023-04-18
CVE-2023-21991 [LOW] CVE-2023-21991: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.44 and Prior to 7.0.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerabilit
nvd
CVE-2026-35249P4LOWCVSS 3.2v7.2.62026-04-21
CVE-2026-35249 [LOW] CWE-284 CVE-2026-35249: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM Virt
nvd
CVE-2020-2909P4LOWCVSS 2.8fixed in 5.2.40≥ 6.0.0, < 6.0.20+1 more2020-04-15
CVE-2020-2909 [LOW] CVE-2020-2909: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppor Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Success
nvd
CVE-2014-2486P4LOWCVSS 3.0≤ 3.2.22v3.2+61 more2014-07-17
CVE-2014-2486 [LOW] CVE-2014-2486: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect integrity and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-2477.
nvd
CVE-2019-2850P4LOWCVSS 2.8≥ 5.0.0, < 5.2.32≥ 6.0.0, < 6.0.102019-07-23
CVE-2019-2850 [LOW] CVE-2019-2850: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). S Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks
nvd
CVE-2014-0404P4LOWCVSS 2.4≤ 3.2.18v3.2.0+47 more2014-01-15
CVE-2014-0404 [LOW] CVE-2014-0404: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4 allows local users to affect integrity and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-0406.
nvd
CVE-2014-0406P4LOWCVSS 2.4≤ 4.1.28v4.1.0+47 more2014-01-15
CVE-2014-0406 [LOW] CVE-2014-0406: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4 allows local users to affect integrity and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-0404.
nvd
CVE-2015-4813P4LOWCVSS 2.1≥ 4.0.0, < 4.0.34≥ 4.1.0, < 4.1.42+3 more2015-10-21
CVE-2015-4813 [LOW] CVE-2015-4813: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4.0.34, 4.1.42, 4.2.34, 4.3.32, and 5.0.8, when using a Windows guest, allows local users to affect availability via unknown vectors related to Core.
nvd
CVE-2014-2488P4LOWCVSS 1.0≤ 3.2.22v3.2+61 more2014-07-17
CVE-2014-2488 [LOW] CVE-2014-2488: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect confidentiality via unknown vectors related to Core.
nvd
CVE-2024-21164P4LOWCVSS 2.5fixed in 7.0.202024-07-16
CVE-2024-21164 [LOW] CWE-125 CVE-2024-21164: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.20. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in O
nvd
CVE-2013-0420P4LOWCVSS 2.4v4.0v4.1.0+1 more2013-01-17
CVE-2013-0420 [LOW] CVE-2013-0420: Unspecified vulnerability in the VirtualBox component in Oracle Virtualization 4.0, 4.1, and 4.2 all Unspecified vulnerability in the VirtualBox component in Oracle Virtualization 4.0, 4.1, and 4.2 allows local users to affect integrity and availability via unknown vectors related to Core. NOTE: The previous information was obtained from the January 2013 Oracle CPU. Oracle has not commented on claims from another vendor that this issue is related to an incorrec
nvd
CVE-2019-2926P4LOWCVSS 2.3≥ 5.2.0, < 5.2.34≥ 6.0.0, < 6.0.142019-10-16
CVE-2019-2926 [LOW] CVE-2019-2926: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppor Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.34 and prior to 6.0.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of
nvd
CVE-2024-21253P4LOWCVSS 2.3≥ 7.0.0, ≤ 7.0.222024-10-15
CVE-2024-21253 [LOW] CWE-404 CVE-2024-21253: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.22. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulner
nvd
CVE-2025-53029P4LOWCVSS 2.3v7.1.102025-07-15
CVE-2025-53029 [LOW] CWE-269 CVE-2025-53029: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.1.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability ca
nvd
CVE-2026-35250P4LOWCVSS 2.3v7.2.62026-04-21
CVE-2026-35250 [LOW] CWE-284 CVE-2026-35250: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can
nvd
CVE-2014-6540P4LOWCVSS 1.9≤ 4.2.24v4.2.0+35 more2014-10-15
CVE-2014-6540 [LOW] CVE-2014-6540: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.1.34, before 4.2.26, and before 4.3.14 allows local users to affect availability via vectors related to Graphics driver (WDDM) for Windows guests.
nvd
CVE-2017-3513P4LOWCVSS 2.5≥ 5.0.0, ≤ 5.0.36≥ 5.1.0, ≤ 5.1.182017-04-24
CVE-2017-3513 [LOW] CVE-2017-3513: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). S Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulne
nvd
CVE-2016-0592P4LOWCVSS 2.1≥ 4.0.0, < 4.3.36≥ 5.0.0, < 5.0.142016-01-21
CVE-2016-0592 [LOW] CVE-2016-0592: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.36 and before 5.0.14 allows local users to affect availability via unknown vectors related to Core.
nvd
← Previous24 / 25Next →
Oracle Vm Virtualbox vulnerabilities | cvebase