Oracle Virtualization 安全漏洞

Oracle Virtualization is a suite of virtualization solutions from Oracle Corporation USA. The product is used to unify the management of the entire hardware and software architecture from applications to disks, enabling virtualization from the desktop to the data center. Oracle Virtualization has...

PT-2025-43004

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions 7.1.12 and 7.2.2 Description An issue exists in the qemuFwCfgMmioRead function within the Box/Devices/PC/DevQemuFwCfg.cpp component of Oracle VM VirtualBox. This relates to an integer overflow condition...

PT-2025-42980

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions 7.1.12 and 7.2.2 Description An easily exploitable issue exists in the Oracle VM VirtualBox Core component, potentially allowing a low-privileged attacker with access to the system where Oracle VM VirtualBox runs ...

CVE-2025-62591: Privilege Defined With Unsafe Actions

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2025-62592: Improper Privilege Management

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2025-62589: Privilege Defined With Unsafe Actions

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2025-61759: Improper Privilege Management

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2025-62641: Privilege Defined With Unsafe Actions

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2025-62587: Privilege Defined With Unsafe Actions

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2025-62588: Privilege Defined With Unsafe Actions

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2025-61760: Improper Access Control

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.12 and 7.2.2. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromi...

PT-2025-43002

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions 7.1.12 through 7.2.2 Description A flaw exists in the Oracle VM VirtualBox product, specifically within the Core component. A highly privileged attacker with local access can compromise the VirtualBox environment...

PT-2025-42981

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions 7.1.12 and 7.2.2 Description A difficult-to-exploit issue exists in the Oracle VM VirtualBox product, specifically within the Core component. A low-privileged attacker with access to the system where Oracle VM...

KLA89408 Multiple vulnerabilities in Oracle VirtualBox

Multiple vulnerabilities were found in Oracle VirtualBox. Malicious users can exploit this vulnerability to execute arbitrary code, obtain sensitive information, cause denial of service. Original advisories Oracle Virtualization Risk Matrix Exploitation Public exploits exist for this vulnerabilit...

PT-2025-42999

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions 7.1.12 and 7.2.2 Description A security flaw exists within the Core component of Oracle VM VirtualBox. A highly privileged attacker with local access can compromise the VirtualBox environment, potentially gaining...

PT-2025-43000

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions 7.1.12 and 7.2.2 Description An easily exploitable issue exists in the Oracle VM VirtualBox Core component of Oracle Virtualization. A high-privileged attacker with access to the system where Oracle VM VirtualBox...

PT-2025-43001

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions 7.1.12 through 7.2.2 Description An issue exists in the Oracle VM VirtualBox product, specifically within the Core component. A high-privileged attacker with local access can compromise Oracle VM VirtualBox,...

PT-2025-43005

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions 7.1.12 and 7.2.2 Description An easily exploitable flaw exists in the Core component of Oracle VM VirtualBox. A high-privileged attacker with access to the system where Oracle VM VirtualBox is running can compromi...

CVE-2025-62590: Privilege Defined With Unsafe Actions

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

PT-2025-43003

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions 7.1.12 and 7.2.2 Description A flaw exists within the Core component of Oracle VM VirtualBox, potentially allowing a high-privileged attacker with access to the system where Oracle VM VirtualBox is running to...