CVE-2022-39425

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.40. Difficult to exploit vulnerability allows unauthenticated attacker with network access via VRDP to compromise Oracle VM VirtualBox. Successful...

CVE-2022-39421

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.40. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2022-39423

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.38. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2022-39423

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.38. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2022-39425

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.40. Difficult to exploit vulnerability allows unauthenticated attacker with network access via VRDP to compromise Oracle VM VirtualBox. Successful...

CVE-2022-39424

CVE-2022-39424 affects Oracle VM VirtualBox (Core) prior to 6.1.40. The vulnerability can be triggered by an unauthenticated attacker over the network via VRDP, enabling takeover of Oracle VM VirtualBox. Affected versions are before 6.1.40; mitigation is to upgrade to 6.1.40 or apply vendor-provi...

PT-2022-6881 · Oracle +1 · Virtualbox +1

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 6.1.40 Description: The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, which can be exploited to cause a denial of service. A high-privileged attacker wi...

Oracle Virtualization和Oracle VM VirtualBox 安全漏洞

Oracle Virtualization and Oracle VM VirtualBox are both products of Oracle Corporation.Oracle Virtualization is a suite of virtualization solutions. It is used to unify the management of the entire hardware and software architecture from applications to disk, enabling virtualization from the...

CVE-2022-21621

CVE-2022-21621 affects Oracle VM VirtualBox prior to 6.1.40 (Core). The vulnerability is described as easily exploitable, requiring a logon with high privileges, and can result in a hang or crash (DOS) of VirtualBox. Remediation: upgrade to the 6.1.40 maintenance release (or later).

Oracle Virtualization和Oracle VM VirtualBox 安全漏洞

Oracle Virtualization and Oracle VM VirtualBox are both products of Oracle Corporation.Oracle Virtualization is a suite of virtualization solutions. The product is used to unify the management of the entire hardware and software architecture from applications to disks, enabling virtualization fro...

CVE-2022-39423

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.38. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2022-39422

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.38. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromi...

CVE-2022-39422

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.38. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromi...

CVE-2022-21621

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.40. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2022-39425

CVE-2022-39425 affects Oracle VM VirtualBox (Core) prior to 6.1.40. The vulnerability can be exploited remotely over VRDP by an unauthenticated attacker, potentially leading to takeover of VirtualBox and impacting confidentiality, integrity, and availability. Public disclosures in connected sourc...

CVE-2022-21620

CVE-2022-21620 affects Oracle VM VirtualBox (Core) prior to 6.1.40. The advisory describes a high-privilege, local attack where an authenticated/logged-in attacker can compromise VirtualBox, potentially taking over the product (scope change may impact other Oracle Virtualization components). Miti...

CVE-2022-39427

CVE-2022-39427 affects Oracle VM VirtualBox before 6.1.40 (Core) on Windows. The root cause is a vulnerability in VirtualBox Core allowing a low-privilege, local attacker with logon to compromise the host, with impact on confidentiality, integrity, and availability (taken over the VirtualBox). Th...

CVE-2022-39426

CVE-2022-39426 affects Oracle VM VirtualBox (Core) prior to 6.1.40. The vulnerability allows an unauthenticated attacker with network access via VRDP to compromise VirtualBox, potentially taking over the host. Affected version range is before 6.1.40; remediation is to upgrade to 6.1.40 or later (...

CVE-2022-39426

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.40. Difficult to exploit vulnerability allows unauthenticated attacker with network access via VRDP to compromise Oracle VM VirtualBox. Successful...

openSUSE 15 Security Update : virtualbox (openSUSE-SU-2022:10129-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10129-1 advisory. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is...