CVE-2024-21115

CVE-2024-21115 affects Oracle VM VirtualBox (Core) with UNIX/Linux hosts, vulnerable in all supported releases prior to 7.0.16. The vulnerability enables a local, low-privilege attacker with logon to compromise VirtualBox, with potential takeover and impact on related products (scope change). CVS...

CVE-2024-21116

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2024-21113

CVE-2024-21113 affects Oracle VM VirtualBox (Core) prior to 7.0.16. A local, low-privilege attacker with logon can compromise VirtualBox, with potential takeover and impact to related products. CVSS v3.1 base score 8.8 (HIGH). Remediation: apply patches to move to 7.0.16+ (vendor advisories, Mage...

CVE-2024-21113

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2024-21112

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2024-21112

Oracle VM VirtualBox Core is affected (prior to 7.0.16). The CVE-2024-21112 issue allows a low-privilege, locally authenticated attacker to compromise VirtualBox, with potential scope change to impact other products and complete takeover. Public sources (NVD/NCSC/Mageia/NASL highlights) corrobora...

CVE-2024-21114

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2024-21111

CVE-2024-21111 affects Oracle VM VirtualBox (Core) with affected versions prior to 7.0.16 on Windows hosts. The connected exploit DB entry documents a Privilege Escalation exploit for VirtualBox 7.0.16 on Windows x64, indicating local attacker access can lead to takeover of VirtualBox. Several ad...

CVE-2024-21109

CVE-2024-21109 affects Oracle VM VirtualBox (Core) with affected versions prior to 7.0.16. The vulnerability allows unauthenticated, network-accessible attacks via HTTP, potentially enabling unauthorized access to sensitive data or full data access on Oracle VM VirtualBox. Exploitation details ar...

CVE-2024-21109

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle VM VirtualBox. Successful...

CVE-2024-21111

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2024-21110

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2024-21106

Oracle VM VirtualBox is affected in the Core component for versions older than 7.0.16. The issue allows a locally authenticated, low-privilege attacker to cause a crash or hang (complete DoS) of the VirtualBox host, with potential scope changes impacting other products. The vulnerability is docum...

CVE-2024-21106

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2024-21107

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2024-21107

CVE-2024-21107 affects the Oracle VM VirtualBox Core on Windows hosts, with affected versions prior to 7.0.16. The vulnerability enables a local, high-privilege attacker with logon to the infrastructure running VirtualBox to compromise the product, potentially taking over VirtualBox. The base CVS...

CVE-2024-21108

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2024-21103

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2024-21103

CVE-2024-21103 concerns Oracle VM VirtualBox (Core) on Linux hosts. Affected are versions prior to 7.0.16; vulnerability allows a local, low-privilege attacker with logon to the host to compromise VirtualBox, potentially leading to takeover. The CVSS v3.1 base score is 7.8 (High impact on confide...

CVE-2024-21093

The CVE-2024-21093 entry concerns the Java VM component of Oracle Database Server. Affected are Oracle Database Server versions 19.3–19.22 and 21.3–21.13. The issue allows a low-privileged user with Create Session/Create Procedure and network access via Oracle Net to compromise the Java VM, with ...