CVE-2022-39427

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.40. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2022-39427

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.40. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2022-21627

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.40. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2022-21620

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.40. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromi...

CVE-2022-39426

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.40. Difficult to exploit vulnerability allows unauthenticated attacker with network access via VRDP to compromise Oracle VM VirtualBox. Successful...

CVE-2022-21620

CVE-2022-21620 affects Oracle VM VirtualBox (Core) prior to 6.1.40. The advisory describes a high-privilege, local attack where an authenticated/logged-in attacker can compromise VirtualBox, potentially taking over the product (scope change may impact other Oracle Virtualization components). Miti...

CVE-2022-21621

CVE-2022-21621 affects Oracle VM VirtualBox prior to 6.1.40 (Core). The vulnerability is described as easily exploitable, requiring a logon with high privileges, and can result in a hang or crash (DOS) of VirtualBox. Remediation: upgrade to the 6.1.40 maintenance release (or later).

CVE-2022-21627

CVE-2022-21627 affects Oracle VM VirtualBox (Core) up to version 6.1.40. A high-privilege attacker with logon to the host can trigger a hang or frequent crash (DOS) of VirtualBox. Base CVSS v3.1 score is 4.4 (AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). Mitigation: upgrade to VirtualBox 6.1.40 or later,...

CVE-2022-39421

CVE-2022-39421 affects Oracle VM VirtualBox core on Windows. Affected: VirtualBox ≤ 6.1.39 (Windows), with vulnerabilities that enable takeover when a low-privilege user with logon interacts with the system. Exploitation vector is local; attack complexity low; CVSS: UI:R, PR:L, AV:L, with C/I/A i...

CVE-2022-39422

CVE-2022-39422 affects Oracle VM VirtualBox (Core) and is present in versions prior to 6.1.38. The vulnerability can allow a high-privilege attacker with logon to compromise VirtualBox, with potential takeover of the product and impact to related components. The description and connected document...

CVE-2022-39423

CVE-2022-39423 affects Oracle VM VirtualBox Core for the Oracle Virtualization product. Affected are VirtualBox versions prior to 6.1.38. The vulnerability enables a high-privilege attacker who can log on to the host where VirtualBox runs to compromise the VirtualBox instance, with potential acce...

CVE-2022-39425

CVE-2022-39425 affects Oracle VM VirtualBox (Core) prior to 6.1.40. The vulnerability can be exploited remotely over VRDP by an unauthenticated attacker, potentially leading to takeover of VirtualBox and impacting confidentiality, integrity, and availability. Public disclosures in connected sourc...

CVE-2022-39427

CVE-2022-39427 affects Oracle VM VirtualBox before 6.1.40 (Core) on Windows. The root cause is a vulnerability in VirtualBox Core allowing a low-privilege, local attacker with logon to compromise the host, with impact on confidentiality, integrity, and availability (taken over the VirtualBox). Th...

CVE-2022-39426

CVE-2022-39426 affects Oracle VM VirtualBox (Core) prior to 6.1.40. The vulnerability allows an unauthenticated attacker with network access via VRDP to compromise VirtualBox, potentially taking over the host. Affected version range is before 6.1.40; remediation is to upgrade to 6.1.40 or later (...

Oracle Virtualization and Oracle VM VirtualBox security vulnerabilities

Oracle Virtualization and Oracle VM VirtualBox are both products of Oracle Corporation.Oracle Virtualization is a suite of virtualization solutions. It is used to unify the management of the entire hardware and software architecture from applications to disk, enabling virtualization from the...

Oracle Virtualization and Oracle VM VirtualBox security vulnerabilities

Oracle Virtualization and Oracle VM VirtualBox are both products of Oracle Corporation.Oracle Virtualization is a suite of virtualization solutions. The product is used to unify the management of the entire hardware and software architecture from applications to disks, enabling virtualization fro...

Oracle Virtualization and Oracle VM VirtualBox security vulnerabilities

Oracle Virtualization and Oracle VM VirtualBox are both products of Oracle Corporation.Oracle Virtualization is a suite of virtualization solutions. It is used to unify the management of the entire hardware and software architecture from applications to disk, enabling virtualization from the...

Oracle Virtualization and Oracle VM VirtualBox security vulnerabilities

Oracle Virtualization and Oracle VM VirtualBox are both products of Oracle Corporation.Oracle Virtualization is a suite of virtualization solutions. It is used to unify the management of the entire hardware and software architecture from applications to disk, enabling virtualization from the...

Oracle Virtualization and Oracle VM VirtualBox security vulnerabilities

Oracle Virtualization and Oracle VM VirtualBox are both products of Oracle Corporation.Oracle Virtualization is a suite of virtualization solutions. It is used to unify the management of the entire hardware and software architecture from applications to disk, enabling virtualization from the...

Oracle Virtualization and Oracle VM VirtualBox security vulnerabilities

Oracle Virtualization and Oracle VM VirtualBox are both products of Oracle Corporation.Oracle Virtualization is a suite of virtualization solutions. It is used to unify the management of the entire hardware and software architecture from applications to disk, enabling virtualization from the...