cbcvebase.

Oracle Vm Virtualbox vulnerabilities

430 known vulnerabilities affecting oracle/vm_virtualbox.

Total CVEs
430
CISA KEV
1
actively exploited
Public exploits
21
Exploited in wild
1
Severity breakdown
CRITICAL5HIGH201MEDIUM170LOW54

Vulnerabilities

Page 7 of 22
CVE-2026-35251P3HIGHCVSS 7.5v7.2.62026-04-21
CVE-2026-35251 [HIGH] CWE-284 CVE-2026-35251: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM V
nvd
CVE-2026-35246P3HIGHCVSS 7.5v7.2.62026-04-21
CVE-2026-35246 [HIGH] CWE-284 CVE-2026-35246: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM V
nvd
CVE-2018-3085P3HIGHCVSS 8.5fixed in 5.2.162018-07-18
CVE-2018-3085 [HIGH] CVE-2018-3085: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). T Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human in
nvd
CVE-2017-3332P3HIGHCVSS 8.4v5.0.30v5.1.12+2 more2017-01-27
CVE-2017-3332 [HIGH] CVE-2017-3332: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: VirtualB Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: VirtualBox SVGA Emulation). Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle
nvd
CVE-2021-2250P3HIGHCVSS 8.2fixed in 6.1.202021-04-22
CVE-2021-2250 [HIGH] CVE-2021-2250: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The su Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM
nvd
CVE-2021-2409P3HIGHCVSS 8.2fixed in 6.1.242021-07-21
CVE-2021-2409 [HIGH] CVE-2021-2409: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The su Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM
nvd
CVE-2020-2742P3HIGHCVSS 8.2fixed in 5.2.36≥ 6.0.0, < 6.0.16+1 more2020-04-15
CVE-2020-2742 [HIGH] CWE-190 CVE-2020-2742: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppor Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBo
nvd
CVE-2020-14628P3HIGHCVSS 8.2fixed in 5.2.44≥ 6.0.0, < 6.0.24+1 more2020-07-15
CVE-2020-14628 [HIGH] CVE-2020-14628: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppor Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Wh
nvd
CVE-2018-2835P3HIGHCVSS 8.2≥ 5.1.0, < 5.1.36≥ 5.2.0, < 5.2.102018-04-19
CVE-2018-2835 [HIGH] CVE-2018-2835: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). S Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attack
nvd
CVE-2018-2837P3HIGHCVSS 8.2≥ 5.1.0, < 5.1.36≥ 5.2.0, < 5.2.102018-04-19
CVE-2018-2837 [HIGH] CVE-2018-2837: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). S Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attack
nvd
CVE-2018-2836P3HIGHCVSS 8.2≥ 5.1.0, < 5.1.36≥ 5.2.0, < 5.2.102018-04-19
CVE-2018-2836 [HIGH] CVE-2018-2836: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). S Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attack
nvd
CVE-2018-2830P3HIGHCVSS 8.2≥ 5.1.0, < 5.1.36≥ 5.2.0, < 5.2.102018-04-19
CVE-2018-2830 [HIGH] CVE-2018-2830: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). S Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attack
nvd
CVE-2022-21571P3HIGHCVSS 8.2fixed in 6.1.362022-07-19
CVE-2022-21571 [HIGH] CVE-2022-21571: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The su Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.36. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle V
nvd
CVE-2023-21990P3HIGHCVSS 8.2fixed in 6.1.44≥ 7.0.0, < 7.0.82023-04-18
CVE-2023-21990 [HIGH] CWE-269 CVE-2023-21990: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.44 and Prior to 7.0.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vul
nvd
CVE-2021-2129P3HIGHCVSS 7.9fixed in 6.1.182021-01-20
CVE-2021-2129 [HIGH] CVE-2021-2129: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The su Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM
nvd
CVE-2015-3197P3MEDIUMCVSS 5.9v5.0.162016-02-15
CVE-2015-3197 [MEDIUM] CWE-200 CVE-2015-3197: ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disable ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers, which makes it easier for man-in-the-middle attackers to defeat cryptographic protection mechanisms by performing computations on SSLv2 traffic, related to the get_client_master_key and get_client_hello functions.
nvd
CVE-2017-3538P3HIGHCVSS 7.5≤ 5.0.32v5.1.0+7 more2017-04-24
CVE-2017-3538 [HIGH] CVE-2017-3538: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Shared F Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Shared Folder). Supported versions that are affected are Prior to 5.0.34 and Prior to 5.1.16. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While
nvd
CVE-2024-21259P3HIGHCVSS 7.5≥ 7.0.0, < 7.0.22≥ 7.1.0, < 7.1.22024-10-15
CVE-2024-21259 [HIGH] CWE-863 CVE-2024-21259: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.22 and prior to 7.1.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the v
nvd
CVE-2024-21110P3HIGHCVSS 7.3fixed in 7.0.162024-04-16
CVE-2024-21110 [HIGH] CWE-284 CVE-2024-21110: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human
nvd
CVE-2019-3017P3HIGHCVSS 8.2≥ 5.2.0, < 5.2.34≥ 6.0.0, < 6.0.142019-10-16
CVE-2019-3017 [HIGH] CVE-2019-3017: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppor Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.34 and prior to 6.0.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerabili
nvd
← Previous7 / 22Next →
Oracle Vm Virtualbox vulnerabilities | cvebase