CVE-2026-21990

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

Privilege Escalation

virtualBox is vulnerable to Privilege Escalation. The vulnerability is due to inadequate access controls in the Oracle VM VirtualBox product of Oracle Virtualization, allowing a low-privileged attacker with login credentials to compromise Oracle VM VirtualBox installations...

SUSE CVE-2014-2488

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect confidentiality via unknown vectors related to Core...

CVE-2023-21886

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.42 and prior to 7.0.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Orac...

Buffer overflow

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2021-2126

CVE-2021-2126 affects Oracle VM VirtualBox core prior to version 6.1.18. The vulnerability allows a high-privilege attacker with local access to compromise VirtualBox, potentially leading to unauthorized data access or modification. Several connected advisories corroborate impact themes (DoS, inf...

CVE-2020-14889

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2020-2911

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracl...

CVE-2020-2705

CVE-2020-2705 affects Oracle VM VirtualBox (Core) on multiple lines: vulnerable versions include Oracle VM VirtualBox prior to 5.2.36, 6.0.x prior to 6.0.16, and 6.1.x prior to 6.1.2. The advisory notes an easily exploitable vulnerability that lets a low-privilege, logon-allowed attacker compromi...

CVE-2019-2527

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are prior to 5.2.26 and prior to 6.0.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

CVE-2019-2520

CVE-2019-2520 is a vulnerability in the Oracle VM VirtualBox Core component. Public documentation confirms a vulnerability with Local access, enabling low-privilege logon attackers to compromise VirtualBox, potentially affecting other products. Affected versions are before 5.2.24 (and before 6.0....

CVE-2018-2843

CVE-2018-2843 is a vulnerability in the Oracle VM VirtualBox core component. Affected are VirtualBox versions prior to 5.1.36 and prior to 5.2.10. The issue is described as easily exploitable, requiring logon to the infrastructure where VirtualBox runs, with a low-privilege attacker able to compr...

CVE-2018-2676

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBo...