vbox-vmdk-sparse-extent

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · vbox-vmdk-sparse-extent vbox-vmdk-sparse-extent Class: File read Reach: Local host UI:R Oracle VM VirtualBox OSS 7.2.20 f2792cf44 - Oracle A host user who imports an OVF directory or OVA whose disk is a sparse VMDK...

vbox-ovf-nat-tftp-prefix

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · vbox-ovf-nat-tftp-prefix vbox-ovf-nat-tftp-prefix Class: File read Reach: Local guest after UI:R import Oracle VM VirtualBox OSS 7.2.20 f2792cf44 - Oracle vbox:Machine OVF import sanitizes ExtraData, shared folders,...

vbox-hgcm-ssm-cparms

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · vbox-hgcm-ssm-cparms vbox-hgcm-ssm-cparms Class: Heap overflow Reach: Local host Oracle VM VirtualBox OSS 7.2.20 f2792cf44 - Oracle Live HGCM still refuses cParms 32. Saved-state load does not. vmmdevR3HgcmLoadState...

CVE-2024-21111

These binaries were built from source using mansk1es code. https://github.com/mansk1es/CVE-2024-21111 Prebuilt binaries for Privilege Escalation in Oracle VM Virtual box prior to 7.0.16...

vbox-ovf-href-dest-escape

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · vbox-ovf-href-dest-escape vbox-ovf-href-dest-escape Class: File write Reach: Local host UI:R Oracle VM VirtualBox OSS 7.2.20 f2792cf44 - Oracle A host user who imports a hostile OVF/OVA writes disk-image bytes outside...

vbox-guestctrl-copyfrom-dotdot

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · vbox-guestctrl-copyfrom-dotdot vbox-guestctrl-copyfrom-dotdot Class: File write Reach: Local guest confused-deputy Oracle VM VirtualBox OSS 7.2.20 f2792cf44 - Oracle Host IGuestSession::directoryCopyFromGuest /...

UBUNTU-CVE-2026-101599

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualiza...

Linux Distros Unpatched Vulnerability : CVE-2026-87311

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Difficult to explo...

Oracle VM VirtualBox 7.2.22 (October 2026 CPU)

The 7.2.20 versions of VM VirtualBox installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.20...

Linux Distros Unpatched Vulnerability : CVE-2026-87322

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.20. Easily exploitable...

UBUNTU-CVE-2026-101598

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualiza...

Linux Distros Unpatched Vulnerability : CVE-2026-87301

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable...

Linux Distros Unpatched Vulnerability : CVE-2026-87303

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable...

UBUNTU-CVE-2026-87322

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualiza...

UBUNTU-CVE-2026-87311

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualiza...

CVE-2026-87322

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualiza...

CVE-2026-101599

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualiza...

CVE-2026-87311

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualiza...

CVE-2026-101598

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualiza...

Linux Distros Unpatched Vulnerability : CVE-2026-101598

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.20. Easily exploitable...