Oracle Vm Virtualbox vulnerabilities
430 known vulnerabilities affecting oracle/vm_virtualbox.
Total CVEs
430
CISA KEV
1
actively exploited
Public exploits
21
Exploited in wild
1
Severity breakdown
CRITICAL5HIGH201MEDIUM170LOW54
Vulnerabilities
Page 8 of 22
CVE-2019-2867P3HIGHCVSS 8.2≥ 5.0.0, < 5.2.32≥ 6.0.0, < 6.0.102019-07-23
CVE-2019-2867 [HIGH] CWE-787 CVE-2019-2867: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). S
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While th
nvd
CVE-2020-2758P3HIGHCVSS 8.2fixed in 5.2.40≥ 6.0.0, < 6.0.20+1 more2020-04-15
CVE-2020-2758 [HIGH] CWE-416 CVE-2020-2758: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppor
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBo
nvd
CVE-2020-2908P3HIGHCVSS 8.2fixed in 5.2.40≥ 6.0.0, < 6.0.20+1 more2020-04-15
CVE-2020-2908 [HIGH] CWE-20 CVE-2020-2908: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppor
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox
nvd
CVE-2021-2074P3HIGHCVSS 8.2fixed in 6.1.182021-01-20
CVE-2021-2074 [HIGH] CVE-2021-2074: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The su
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM
nvd
CVE-2019-2866P3HIGHCVSS 8.2≥ 5.0.0, < 5.2.32≥ 6.0.0, < 6.0.102019-07-23
CVE-2019-2866 [HIGH] CVE-2019-2866: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). S
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulner
nvd
CVE-2018-2860P3HIGHCVSS 8.2≥ 5.1.0, < 5.1.36≥ 5.2.0, < 5.2.102018-04-19
CVE-2018-2860 [HIGH] CVE-2018-2860: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). S
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulner
nvd
CVE-2020-2682P3HIGHCVSS 8.2≥ 5.2.0, < 5.2.36≥ 6.0.0, < 6.0.16+1 more2020-01-15
CVE-2020-2682 [HIGH] CVE-2020-2682: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppor
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While
nvd
CVE-2020-2674P3HIGHCVSS 8.2≥ 5.2.0, < 5.2.36≥ 6.0.0, < 6.0.16+1 more2020-01-15
CVE-2020-2674 [HIGH] CVE-2020-2674: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppor
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While
nvd
CVE-2020-14872P3HIGHCVSS 8.2fixed in 6.1.162020-10-21
CVE-2020-14872 [HIGH] CVE-2020-14872: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The su
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle V
nvd
CVE-2018-2693P3HIGHCVSS 8.2≥ 5.1.0, < 5.1.32≥ 5.2.0, < 5.2.62018-01-18
CVE-2018-2693 [HIGH] CVE-2018-2693: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Guest Ad
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Guest Additions). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Success
nvd
CVE-2013-3779P3HIGHCVSS 7.5v4.6v4.7+3 more2013-07-17
CVE-2013-3779 [HIGH] CVE-2013-3779: Unspecified vulnerability in the Secure Global Desktop component in Oracle Virtualization All 4.6 re
Unspecified vulnerability in the Secure Global Desktop component in Oracle Virtualization All 4.6 releases including 4.63 and 4.7 prior to 4.71 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web UI.
nvd
CVE-2021-2145P3HIGHCVSS 7.5fixed in 6.1.202021-04-22
CVE-2021-2145 [HIGH] CVE-2021-2145: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The su
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle V
nvd
CVE-2022-39421P3HIGHCVSS 7.3fixed in 6.1.402022-10-18
CVE-2022-39421 [HIGH] CWE-284 CVE-2022-39421: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppor
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.40. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human
nvd
CVE-2018-3309P4HIGHCVSS 8.2fixed in 5.2.222019-01-16
CVE-2018-3309 [HIGH] CVE-2018-3309: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). T
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is prior to 5.2.22. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracl
nvd
CVE-2018-2676P4HIGHCVSS 8.2≥ 5.1.0, < 5.1.32≥ 5.2.0, < 5.2.62018-01-18
CVE-2018-2676 [HIGH] CVE-2018-2676: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). S
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnera
nvd
CVE-2020-2905P4HIGHCVSS 8.2fixed in 5.2.40≥ 6.0.0, < 6.0.20+1 more2020-04-15
CVE-2020-2905 [HIGH] CVE-2020-2905: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppor
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While
nvd
CVE-2017-3559P4HIGHCVSS 7.9≥ 5.0.0, < 5.0.38≥ 5.1.0, < 5.1.202017-04-24
CVE-2017-3559 [HIGH] CVE-2017-3559: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). S
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulne
nvd
CVE-2023-22100P4HIGHCVSS 7.9≥ 7.0.0, < 7.0.122023-10-17
CVE-2023-22100 [HIGH] CVE-2023-22100: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Suppo
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM
nvd
CVE-2016-5501P4HIGHCVSS 7.8≥ 5.0.0, < 5.0.28≥ 5.1.0, < 5.1.82016-10-25
CVE-2016-5501 [HIGH] CVE-2016-5501: Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8
Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect confidentiality, integrity, and availability via vectors related to Core, a different vulnerability than CVE-2016-5538.
nvd
CVE-2021-2310P4HIGHCVSS 7.5fixed in 6.1.202021-04-22
CVE-2021-2310 [HIGH] CVE-2021-2310: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The su
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle V
nvd