Oracle Vm Virtualbox vulnerabilities
483 known vulnerabilities affecting oracle/vm_virtualbox.
Total CVEs
483
CISA KEV
1
actively exploited
Public exploits
21
Exploited in wild
1
Severity breakdown
CRITICAL5HIGH221MEDIUM195LOW62
Vulnerabilities
Page 5 of 25
CVE-2025-62590P3HIGHCVSS 8.2v7.1.12v7.2.22025-10-21
CVE-2025-62590 [HIGH] CWE-267 CVE-2025-62590: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in O
nvd
CVE-2025-62641P3HIGHCVSS 8.2v7.1.12v7.2.22025-10-21
CVE-2025-62641 [HIGH] CWE-267 CVE-2025-62641: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in O
nvd
CVE-2025-62587P3HIGHCVSS 8.2v7.1.12v7.2.22025-10-21
CVE-2025-62587 [HIGH] CWE-267 CVE-2025-62587: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in O
nvd
CVE-2026-71129P3HIGHCVSS 8.2v7.2.142026-08-18
CVE-2026-71129 [HIGH] CWE-284 CVE-2026-71129: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM Vi
nvd
CVE-2026-21989P3HIGHCVSS 8.1v7.1.14v7.2.42026-01-20
CVE-2026-21989 [HIGH] CVE-2026-21989: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM
nvd
CVE-2022-21491P3HIGHCVSS 7.8fixed in 6.1.342022-04-19
CVE-2022-21491 [HIGH] CVE-2022-21491: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The su
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.34. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerabilit
nvd
CVE-2021-35538P3HIGHCVSS 7.8fixed in 6.1.282021-10-20
CVE-2021-35538 [HIGH] CVE-2021-35538: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The su
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.28. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerabilit
nvd
CVE-2026-87276P3HIGHCVSS 7.5v7.2.162026-09-15
CVE-2026-87276 [HIGH] CWE-284 CVE-2026-87276: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interact
nvd
CVE-2018-3287P3HIGHCVSS 8.6fixed in 5.2.202018-10-17
CVE-2018-3287 [HIGH] CVE-2018-3287: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). T
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human in
nvd
CVE-2018-3298P3HIGHCVSS 8.6fixed in 5.2.202018-10-17
CVE-2018-3298 [HIGH] CVE-2018-3298: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). T
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human in
nvd
CVE-2018-3296P3HIGHCVSS 8.6fixed in 5.2.202018-10-17
CVE-2018-3296 [HIGH] CVE-2018-3296: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). T
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human in
nvd
CVE-2018-2909P3HIGHCVSS 8.6fixed in 5.2.202018-10-17
CVE-2018-2909 [HIGH] CVE-2018-2909: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). T
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human in
nvd
CVE-2018-3289P3HIGHCVSS 8.6fixed in 5.2.202018-10-17
CVE-2018-3289 [HIGH] CVE-2018-3289: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). T
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human in
nvd
CVE-2018-3290P3HIGHCVSS 8.6fixed in 5.2.202018-10-17
CVE-2018-3290 [HIGH] CVE-2018-3290: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). T
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human in
nvd
CVE-2018-3288P3HIGHCVSS 8.6fixed in 5.2.202018-10-17
CVE-2018-3288 [HIGH] CVE-2018-3288: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). T
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human in
nvd
CVE-2018-3293P3HIGHCVSS 8.6fixed in 5.2.202018-10-17
CVE-2018-3293 [HIGH] CVE-2018-3293: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). T
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human in
nvd
CVE-2018-3297P3HIGHCVSS 8.6fixed in 5.2.202018-10-17
CVE-2018-3297 [HIGH] CVE-2018-3297: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). T
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human in
nvd
CVE-2018-3292P3HIGHCVSS 8.6fixed in 5.2.202018-10-17
CVE-2018-3292 [HIGH] CVE-2018-3292: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). T
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human in
nvd
CVE-2018-3291P3HIGHCVSS 8.6fixed in 5.2.202018-10-17
CVE-2018-3291 [HIGH] CVE-2018-3291: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). T
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human in
nvd
CVE-2018-2689P3HIGHCVSS 8.6≥ 5.1.0, < 5.1.32≥ 5.2.0, < 5.2.62018-01-18
CVE-2018-2689 [HIGH] CVE-2018-2689: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). S
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attack
nvd