Oracle Vm Virtualbox vulnerabilities
481 known vulnerabilities affecting oracle/vm_virtualbox.
Total CVEs
481
CISA KEV
1
actively exploited
Public exploits
21
Exploited in wild
1
Severity breakdown
CRITICAL5HIGH220MEDIUM195LOW61
Vulnerabilities
Page 3 of 25
CVE-2019-2723P3HIGHCVSS 8.8fixed in 5.2.28≥ 6.0.0, < 6.0.62019-04-23
CVE-2019-2723 [HIGH] CWE-190 CVE-2019-2723: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). S
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the
nvd
CVE-2019-2722P3HIGHCVSS 8.8fixed in 5.2.28≥ 6.0.0, < 6.0.62019-04-23
CVE-2019-2722 [HIGH] CVE-2019-2722: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). S
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerab
nvd
CVE-2019-3028P3HIGHCVSS 8.8≥ 5.2.0, < 5.2.34≥ 6.0.0, < 6.0.142019-10-16
CVE-2019-3028 [HIGH] CVE-2019-3028: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppor
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.34 and prior to 6.0.14. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerabilit
nvd
CVE-2020-2902P3HIGHCVSS 8.8fixed in 5.2.40≥ 6.0.0, < 6.0.20+1 more2020-04-15
CVE-2020-2902 [HIGH] CWE-787 CVE-2020-2902: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppor
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox
nvd
CVE-2014-2477P4LOWCVSS 3.6PoC≤ 4.0.24v4.0+61 more2014-07-17
CVE-2014-2477 [LOW] CVE-2014-2477: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect integrity and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-2486.
nvd
CVE-2026-87270P3HIGHCVSS 7.8v7.2.162026-09-15
CVE-2026-87270 [HIGH] CWE-269 CVE-2026-87270: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability ca
nvd
CVE-2026-87272P3HIGHCVSS 7.8v7.2.162026-09-15
CVE-2026-87272 [HIGH] CWE-269 CVE-2026-87272: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability ca
nvd
CVE-2026-87269P3HIGHCVSS 7.8v7.2.162026-09-15
CVE-2026-87269 [HIGH] CWE-269 CVE-2026-87269: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability ca
nvd
CVE-2026-87271P3HIGHCVSS 7.8v7.2.162026-09-15
CVE-2026-87271 [HIGH] CWE-269 CVE-2026-87271: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability ca
nvd
CVE-2026-87268P3HIGHCVSS 7.8v7.2.162026-09-15
CVE-2026-87268 [HIGH] CWE-269 CVE-2026-87268: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability ca
nvd
CVE-2026-47047P3HIGHCVSS 7.8v7.2.122026-07-21
CVE-2026-47047 [HIGH] CWE-269 CVE-2026-47047: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability ca
nvd
CVE-2026-47054P3HIGHCVSS 7.8v7.2.122026-07-21
CVE-2026-47054 [HIGH] CWE-269 CVE-2026-47054: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability ca
nvd
CVE-2026-60150P3HIGHCVSS 7.8v7.2.122026-07-21
CVE-2026-60150 [HIGH] CWE-269 CVE-2026-60150: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability ca
nvd
CVE-2026-71113P3HIGHCVSS 7.5v7.2.142026-08-18
CVE-2026-71113 [HIGH] CWE-284 CVE-2026-71113: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via RDP to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to caus
nvd
CVE-2019-2703P3HIGHCVSS 8.8fixed in 5.2.28≥ 6.0.0, < 6.0.62019-04-23
CVE-2019-2703 [HIGH] CVE-2019-2703: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). S
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerab
nvd
CVE-2019-2680P3HIGHCVSS 8.8fixed in 5.2.28≥ 6.0.0, < 6.0.62019-04-23
CVE-2019-2680 [HIGH] CVE-2019-2680: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). S
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerab
nvd
CVE-2019-2696P3HIGHCVSS 8.8fixed in 5.2.28≥ 6.0.0, < 6.0.62019-04-23
CVE-2019-2696 [HIGH] CVE-2019-2696: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). S
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerab
nvd
CVE-2019-2656P3HIGHCVSS 8.8fixed in 5.2.28≥ 6.0.0, < 6.0.62019-04-23
CVE-2019-2656 [HIGH] CVE-2019-2656: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). S
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerab
nvd
CVE-2019-2552P3HIGHCVSS 8.8fixed in 5.2.24v6.0.02019-01-16
CVE-2019-2552 [HIGH] CVE-2019-2552: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). S
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerab
nvd
CVE-2019-2500P3HIGHCVSS 8.8fixed in 5.2.24v6.0.02019-01-16
CVE-2019-2500 [HIGH] CVE-2019-2500: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). S
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerab
nvd