CVE-2026-101598

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.20. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...

PT-2026-119620

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...

PT-2026-119279

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.20. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle...

PT-2026-119278

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.20. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...

PT-2026-119622

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...

PT-2026-119641

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.20. Easily exploitable vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the Oracl...

PT-2026-119630

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle...

KLA91366 Multiple vulnerabilities in Oracle VirtualBox

Multiple vulnerabilities were found in Oracle VirtualBox. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Security vulnerability can be...

Oracle VM VirtualBox security vulnerabilities

Oracle VM VirtualBox 7.2.16 has a security vulnerability. This vulnerability stems from issues with the Core components and could allow low-privilege attackers to log in and execute actions on the infrastructure. This could lead to unauthorized access to critical data or all data, causing the...

Oracle VM VirtualBox security vulnerabilities

Oracle VM VirtualBox 7.2.20 has a security vulnerability. This vulnerability stems from issues with the Core component and could allow low-privilege attackers to log in and perform infrastructure takeover of Oracle VM VirtualBox...

Oracle VM VirtualBox security vulnerabilities

Oracle VM VirtualBox 7.2.20 has a security vulnerability. This vulnerability stems from issues with the Core component and could allow low-privilege attackers to log in and execute infrastructure tasks, requiring user interaction to take control of Oracle VM VirtualBox. This vulnerability may als...

Oracle VM VirtualBox security vulnerabilities

Oracle VM VirtualBox 7.2.16 has a security vulnerability. This vulnerability stems from issues with the Core component and could allow low-privilege attackers to log in and execute actions on the infrastructure, resulting in service suspension or frequent crashes...

Oracle VM VirtualBox security vulnerabilities

Oracle VM VirtualBox 7.2.16 has a security vulnerability. This vulnerability stems from issues with the Core component and could allow low-privilege attackers to log in and execute actions on the infrastructure. This could result in Oracle VM VirtualBox becoming suspended or experiencing frequent...

Oracle VM VirtualBox security vulnerabilities

Oracle VM VirtualBox 7.2.20 has a security vulnerability. This vulnerability stems from issues with the Core component and could allow attackers with high privileges and access to the physical communication ports connected to the hardware running Oracle VM VirtualBox to take control of it. This...

MGASA-2026-0506 Updated kernel, drakx-installer-images, kmod-nvidia-current-wopengpu, kmod-xtables-addons & kmod-virtualbox packages fix Security Vulnerabilities

Upstream kernel 6.18.55 version fixes bugs and vulnerabilities. The kmod-xtables-addons, kmod-virtualbox, kmod-nvidia-current-wopengpu & drakx-installer-images packages have been updated to work with this new kernel...

Updated kernel, drakx-installer-images, kmod-nvidia-current-wopengpu, kmod-xtables-addons & kmod-virtualbox packages fix Security Vulnerabilities

Upstream kernel 6.18.55 version fixes bugs and vulnerabilities. The kmod-xtables-addons, kmod-virtualbox, kmod-nvidia-current-wopengpu & drakx-installer-images packages have been updated to work with this new kernel...

VirtualBox 7.2.97 IDispatch COM Object Interop Process Hardening Bypass

VirtualBox version 7.2.97 on Windows contains an IDispatch COM object interop process hardening bypass that can allow arbitrary COM object creation in a protected VirtualBox process. The proof of concept displays a message box from the protected process. https://packetstorm.news/download/235878...

VirtualBox 7.2.97 .NET FlatImageLayout Process Hardening Bypass

VirtualBox version 7.2.97 contains a .NET FlatImageLayout process-hardening bypass. The included proof of concept uses a per-user COM registration hijack to load an AnyCPU .NET assembly into a hardened VirtualBox VM process. https://packetstorm.news/download/235874...

PT-2026-122967

Upstream kernel 6.18.55 version fixes bugs and vulnerabilities. The kmod-xtables-addons, kmod-virtualbox, kmod-nvidia-current-wopengpu & drakx-installer-images packages have been updated to work with this new kernel...

VirtualBox 7.2.97 COM RPC Interface Code Injection / Privilege Escalation

VirtualBox version 7.2.97 on Windows contains an insufficient fix for a COM RPC interface code injection elevation of privilege issue. The proof of concept invokes GetCurrentProcessId in a hardened VirtualBox process. https://packetstorm.news/download/235875...