CVE-2020-2929

CVE-2020-2929 affects Oracle VM VirtualBox (Core) with local access. Products/versions affected: VirtualBox prior to 5.2.40, prior to 6.0.20, and prior to 6.1.6. Exploitation requires a low-privilege attacker who can log on to the infrastructure where VirtualBox runs; successful attacks can resul...

CVE-2020-2907

CVE-2020-2907 affects the Core of Oracle VM VirtualBox. Affected are VirtualBox versions prior to 5.2.40, 6.0.20, and 6.1.6. The vulnerability is described as difficult to exploit but allows a high-privileged attacker with local access to compromise VirtualBox, potentially impacting other product...

CVE-2020-2910

CVE-2020-2910 affects Oracle VM VirtualBox (Core) with affected versions prior to 6.0.20 and prior to 6.1.6. The vulnerability allows a low-privileged user with logon to the host running VirtualBox to compromise the VirtualBox component, potentially leading to unauthorized creation, deletion or m...

CVE-2020-2908

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ...

CVE-2020-2902

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle V...

CVE-2020-2902

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle V...

CVE-2020-2905

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ...

CVE-2020-2894

CVE-2020-2894 affects the Core component of Oracle VM VirtualBox. It involves versions before 5.2.40, 6.0.20, and 6.1.6, allowing a high-privilege attacker with local logon to compromise VirtualBox and potentially take over the product. Multiple connected advisories indicate fixes in later Virtua...

CVE-2020-2894

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ...

CVE-2020-2902

CVE-2020-2902 affects Oracle VM VirtualBox (Core) with affected versions prior to 5.2.40, prior to 6.0.20, and prior to 6.1.6. The vulnerability is described as easily exploitable; a low-privileged attacker with local access to the host running VirtualBox can compromise the VirtualBox instance, w...

CVE-2020-2758

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ...

CVE-2020-2743

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ...

CVE-2020-2742

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ...

CVE-2020-2741

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ...

CVE-2020-2758

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ...

CVE-2020-2743

CVE-2020-2743 affects Oracle VM VirtualBox (Core). Affected: VirtualBox versions prior to 5.2.36, 6.0.16, and 6.1.2. Impact per sources: an attacker with local logon can compromise VirtualBox and potentially access high‑confidentiality data; exploitation is described as easily exploitable. Remedi...

CVE-2020-2758

CVE-2020-2758 affects Oracle VM VirtualBox (Core) with vulnerable versions before 5.2.40, before 6.0.20, and before 6.1.6. The issue allows a local, high-privilege attacker with logon to the host to compromise VirtualBox, with potential takeover and impacts to related products. Public advisories ...

CVE-2020-2742

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ...

CVE-2020-2741

CVE-2020-2741 affects Oracle VM VirtualBox (Core) with affected releases before 5.2.40, 6.0.20 and 6.1.6. The vulnerability allows a high-privilege user who can log on to the host infrastructure running VirtualBox to potentially compromise VirtualBox and, per sources, may lead to unauthorized acc...

Oracle VM VirtualBox (Apr 2020 CPU)

The version of Oracle VM VirtualBox running on the remote host is 5.2.x prior to 5.2.40, 6.0.x prior to 6.0.20 or 6.1.x prior to 6.1.6. It is, therefore, affected by multiple vulnerabilities as noted in the April 2019 Critical Patch Update advisory. Note that Nessus has not tested for this issue...