CVE-2019-2450

CVE-2019-2450 affects Oracle VM VirtualBox (Core) with affected versions prior to 5.2.24 and prior to 6.0.2. The issue is exploitable by a low-privilege user that can log on to the infrastructure where VirtualBox runs, potentially leading to unauthorized access to data or complete access to data ...

CVE-2020-14675

CVE-2020-14675 affects Oracle VM VirtualBox (Core). Affected: VirtualBox versions prior to 5.2.44, prior to 6.0.24, and prior to 6.1.12. Root cause is described in public advisories as a vulnerability that could allow a high-privilege attacker with local logon to compromise the VirtualBox instanc...

CVE-2020-14677

CVE-2020-14677 affects Oracle VM VirtualBox (Core) with affected versions prior to 5.2.44, 6.0.24, and 6.1.12. The issue is described as high-severity, with local attack vector, requiring high privileges and no user interaction, potentially allowing takeover or compromise of VirtualBox and impact...

CVE-2020-2910

CVE-2020-2910 affects Oracle VM VirtualBox (Core) with affected versions prior to 6.0.20 and prior to 6.1.6. The vulnerability allows a low-privileged user with logon to the host running VirtualBox to compromise the VirtualBox component, potentially leading to unauthorized creation, deletion or m...

CVE-2020-2913

CVE-2020-2913 affects Oracle VM VirtualBox (Core). Vulnerable in VirtualBox versions prior to 6.0.20 and prior to 6.1.6. A low-privileged user with logon can compromise the VirtualBox instance, potentially leading to takeover. Mitigation: upgrade to VirtualBox 6.0.20 or 6.1.6 (or later) as per th...

CVE-2021-2296

CVE-2021-2296 affects Oracle VM VirtualBox (Core) prior to version 6.1.20. The issue is described as a local-access vulnerability where a high-privileged user with logon can compromise VirtualBox, with potential to cause information disclosure and data access across related products. The root cau...

CVE-2021-2297

CVE-2021-2297 concerns Oracle VM VirtualBox, Core component, with affected versions prior to 6.1.20. The issue allows a high-privileged attacker who can log on to the infrastructure where VirtualBox runs to compromise the VM VirtualBox, potentially leading to unauthorized access to sensitive data...

CVE-2021-2306

CVE-2021-2306 affects Oracle VM VirtualBox Core before 6.1.20. Multiple connected advisories confirm this vulnerability in VirtualBox, with impacts including arbitrary code execution, information disclosure, and potential filesystem access, primarily for local/privileged attack scenarios. The pub...

CVE-2019-2446

CVE-2019-2446 affects Oracle VM VirtualBox (Core) with vulnerable OpenGL/guest-VM handling prior to 5.2.24 and prior to 6.0.2. Exploitation could allow a low-privileged user with logon to the host infrastructure to access or compromise data within VirtualBox. Public advisories from OpenSUSE/Magei...

CVE-2020-2742

CVE-2020-2742 affects Oracle VM VirtualBox (core) with vulnerable versions prior to 5.2.36, 6.0.16, and 6.1.2. The vulnerability allows a high-privilege attacker with local logon to compromise VirtualBox, potentially taking control of the VirtualBox host. CVSS 3.0 base score is 8.2 (HIGH) with lo...

CVE-2020-2908

CVE-2020-2908 affects Oracle VM VirtualBox (Core) with vulnerable versions before 5.2.40, 6.0.20, and 6.1.6. The CVE enables a high-privilege local attacker to compromise VirtualBox, with potential takeover and impact on other products. Public references show multiple advisories and vendor/securi...

CVE-2021-2250

CVE-2021-2250 affects Oracle VM VirtualBox Core (pre-6.1.20). The issue allows high-privilege attackers with logon to compromise VirtualBox, with potential takeover of the product and impact to connected products. The family of CVEs discussed (including CVE-2021-2250, 2145, 2264–2310, etc.) share...

CVE-2019-2552

CVE-2019-2552 affects Oracle VM VirtualBox (Core) with affected versions prior to 5.2.24 and prior to 6.0.2. The issue is exploited locally by a low-privilege user who can log on to the infrastructure where VirtualBox runs, potentially leading to takeover of Oracle VM VirtualBox and significant i...

CVE-2019-2553

CVE-2019-2553 affects the Oracle VM VirtualBox Core component. Affected versions are prior to 5.2.24 and prior to 6.0.2. The issue is exploitable by a low-privileged, logon-based attacker ; successful exploitation can yield unauthorized read access to a subset of Oracle VM VirtualBox data. Public...

CVE-2019-2864

Summary (CVE-2019-2864) : A vulnerability in the Oracle VM VirtualBox core subcomponent affects VirtualBox versions earlier than 5.2.32 and 6.0.10 . The flaw enables a high-privilege attacker with local access to compromise Oracle VM VirtualBox, with potential takeover of the VirtualBox instance ...

CVE-2020-2741

CVE-2020-2741 affects Oracle VM VirtualBox (Core) with affected releases before 5.2.40, 6.0.20 and 6.1.6. The vulnerability allows a high-privilege user who can log on to the host infrastructure running VirtualBox to potentially compromise VirtualBox and, per sources, may lead to unauthorized acc...

CVE-2020-2748

CVE-2020-2748 concerns Oracle VM VirtualBox (Core). Affected are Oracle VirtualBox versions prior to 5.2.40, 6.0.20, and 6.1.6. The vulnerability enables a high-privileged attacker with local logon to the host to compromise VirtualBox, with possible unauthorized read access to a subset of data ex...

CVE-2019-2509

CVE-2019-2509 affects Oracle VM VirtualBox (Core). Affected: Oracle VM VirtualBox versions prior to 5.2.24 and prior to 6.0.2. Root cause: vulnerability in VirtualBox core that enables a low-privileged attacker with logon to the infrastructure running VirtualBox to crash or hang the VM platform (...

CVE-2019-2555

CVE-2019-2555 concerns a vulnerability in the Oracle VM VirtualBox Core subcomponent. Affected are Open VirtualBox versions prior to 5.2.24 and prior to 6.0.2. The issue is described as easily exploitable, allowing a low-privileged attacker with logon to the infrastructure where VirtualBox runs t...

CVE-2019-2574

CVE-2019-2574 affects the Oracle VM VirtualBox core in Oracle Virtualization; affected versions are prior to 5.2.28 and prior to 6.0.6. An attacker with local logon can exploit this to compromise VirtualBox and, potentially, impact other products, with data access risks (CVSSv3.0 base score 6.5, ...

CVE-2019-2657

Vulnerability: Oracle VM VirtualBox core component is affected in versions before 5.2.28 and before 6.0.6. Root cause unspecified in the provided text, but the issue is described as easily exploitable with a low-privileged, logon-required attacker, potentially leading to takeover of VirtualBox an...

CVE-2019-2865

CVE-2019-2865 affects Oracle VM VirtualBox (Core) with affected releases prior to 5.2.32 and prior to 6.0.10. The public docs describe a high-privilege, local attack where a logged-on attacker can compromise VirtualBox, with potential impact on other products and complete takeover of VirtualBox. ...

CVE-2024-21141

CVE-2024-21141 affects Oracle VM VirtualBox (Core) with affected versions prior to 7.0.20. The vulnerability is described as easily exploitable by a high-privileged attacker who can log on to the infrastructure where VirtualBox runs, potentially allowing takeover of VirtualBox and impacting other...

CVE-2019-2504

CVE-2019-2504 affects Oracle VM VirtualBox (Core) with vulnerable builds before OpenSUSE/OpenSUSE-2019-84 and other distro patches updating to VirtualBox 5.2.24. The issue is a low-privilege, local vulnerability that can allow read access to a subset of VirtualBox data. Affected product versions:...

CVE-2019-2505

CVE-2019-2505 affects Oracle VM VirtualBox (Core) with affected versions before 5.2.24 and before 6.0.2. It is a local, low-privilege vulnerability that can allow read access to a subset of VirtualBox data; exploitation requires logon to the host where VirtualBox runs and can impact other product...

CVE-2019-2527

CVE-2019-2527 affects the Oracle VM VirtualBox core component. The vulnerability is exploitable by a low-privilege, local attacker with logon access to the host environment where VirtualBox runs, and can lead to a hang or frequent crash (partial/complete DoS) of VirtualBox. Affected releases are ...

CVE-2020-2758

CVE-2020-2758 affects Oracle VM VirtualBox (Core) with vulnerable versions before 5.2.40, before 6.0.20, and before 6.1.6. The issue allows a local, high-privilege attacker with logon to the host to compromise VirtualBox, with potential takeover and impacts to related products. Public advisories ...

CVE-2020-2909

The CVE-2020-2909 entry concerns Oracle VM VirtualBox Core vulnerability affecting multiple VirtualBox branches. The provided documents confirm the affected lines and versions: prior to 5.2.40, prior to 6.0.20, and prior to 6.1.6. The root cause is not explicitly stated beyond the description in ...

CVE-2021-2443

CVE-2021-2443 affects Oracle VM VirtualBox Core, prior to 6.1.24. A locally authenticated attacker can cause a hang/crash (DOS) and may read, update or delete data in VirtualBox data, with exploitation tied to Solaris x86 and Linux. Upgrading to 6.1.24 (or later) is recommended per multiple advis...

CVE-2019-2511

CVE-2019-2511 affects the Oracle VM VirtualBox core component. Affected versions are prior to 5.2.24 and prior to 6.0.2; exploitation occurs over the network via SOAP by an unauthenticated attacker, leading to a hang or complete denial-of-service of VirtualBox. Remediation observed in connected a...

CVE-2019-2520

CVE-2019-2520 is a vulnerability in the Oracle VM VirtualBox Core component. Public documentation confirms a vulnerability with Local access, enabling low-privilege logon attackers to compromise VirtualBox, potentially affecting other products. Affected versions are before 5.2.24 (and before 6.0....

CVE-2019-2526

CVE-2019-2526 is a local, high-severity vulnerability in the Oracle VM VirtualBox Core component (affecting 5.2.x before 5.2.24 and 6.0.x before 6.0.2). Exploitation requires logon to the infrastructure hosting VirtualBox; successful exploits can lead to takeover of Oracle VM VirtualBox. OpenSUSE...

CVE-2020-14649

CVE-2020-14649 affects Oracle VM VirtualBox (Core) with affected branches prior to 5.2.44, 6.0.24, and 6.1.12. The issue is described as a difficult-to-exploit vulnerability that allows a high-privilege attacker with local logon to compromise VirtualBox, with potential impact on additional produc...

CVE-2021-2129

CVE-2021-2129 affects Oracle VM VirtualBox (Core) with affected versions prior to 6.1.18. The vulnerability allows a local, highly privileged attacker with logon to the host to compromise VirtualBox, potentially leading to unauthorized access to data or data modification. The base CVSS v3.1 score...

CVE-2021-2283

CVE-2021-2283 affects Oracle VM VirtualBox (Core) prior to version 6.1.20. Description: an information-disclosure vulnerability that is easily exploitable and allows an unauthenticated attacker with logon to the infrastructure where VirtualBox runs to access sensitive data or all data accessible ...

CVE-2019-2500

The CVE-2019-2500 issue affects Oracle VM VirtualBox (Core subcomponent) in affected releases before 5.2.24 and before 6.0.2. The vulnerability is described as easily exploitable with a low-privilege attacker who can log on to the infrastructure where VirtualBox runs, potentially leading to takeo...

CVE-2020-14628

CVE-2020-14628 affects Oracle VM VirtualBox (Core) across several supported branches. Vulnerable versions are Windows VirtualBox prior to 5.2.44, prior to 6.0.24, and prior to 6.1.12. The issue is exploitable by a high-privilege attacker with local logon to the host running VirtualBox, with the p...

CVE-2020-14648

CVE-2020-14648 affects Oracle VM VirtualBox (Core). Affected releases are VirtualBox prior to 5.2.44, prior to 6.0.24, and prior to 6.1.12. The issue is described as a difficult-to-exploit vulnerability in the VirtualBox core that could allow a high-privilege attacker with logon to the infrastruc...

CVE-2020-14704

CVE-2020-14704 affects Oracle VM VirtualBox (Core). Vulnerable in: VirtualBox 5.2.x before 5.2.44, 6.0.x before 6.0.24, and 6.1.x before 6.1.12. The issue allows a high-privilege attacker with logon to compromise VirtualBox and potentially access all data within VirtualBox-usable data; attacks ma...

CVE-2021-2409

Affected software : Oracle VM VirtualBox (Core) prior to 6.1.24. The CVE-2021-2409 issue is described as an easily exploitable vulnerability where a high-privileged attacker with local access to the host infrastructure could compromise VirtualBox, potentially taking over the product. The connecte...

CVE-2019-2501

CVE-2019-2501 affects the Oracle VM VirtualBox core component in Oracle Virtualization. Affected versions are before 5.2.24 and before 6.0.2. The vulnerability allows a low-privileged, logon-based attacker to compromise Oracle VM VirtualBox, potentially leading to unauthorized read access to a su...

CVE-2019-2508

CVE-2019-2508 affects Oracle VM VirtualBox (Core) with vulnerable versions prior to 5.2.24 and prior to 6.0.2. The issue allows a low-privilege user with local logon to crash or hang VirtualBox (partial DoS) and may impact other products. Remediation shown in multiple OS advisories: upgrade Virtu...

CVE-2019-2678

CVE-2019-2678 affects Oracle VM VirtualBox Core: supported versions before 5.2.28 and before 6.0.6 are vulnerable. An attacker with local logon can compromise VirtualBox, potentially gaining unauthorized access to data. OpenSUSE/Mageia advisories show updates addressing this (e.g., VirtualBox 6.0...

CVE-2020-14676

CVE-2020-14676 affects Oracle VM VirtualBox (Core). Affects: VirtualBox 5.2.x before 5.2.44, 6.0.x before 6.0.24, and 6.1.x before 6.1.12. Description: a difficult‑to‑exploit vulnerability allows a high‑privilege attacker with logon to the host to compromise the VirtualBox process, potentially ta...

CVE-2020-14695

CVE-2020-14695 affects Oracle VM VirtualBox (Core) with affected releases: 5.2.x before 5.2.44, 6.0.x before 6.0.24, and 6.1.x before 6.1.12. The issue permits a high-privilege attacker with local logon to compromise VirtualBox and potentially access confidential data. Mitigation per linked advis...

CVE-2020-2743

CVE-2020-2743 affects Oracle VM VirtualBox (Core). Affected: VirtualBox versions prior to 5.2.36, 6.0.16, and 6.1.2. Impact per sources: an attacker with local logon can compromise VirtualBox and potentially access high‑confidentiality data; exploitation is described as easily exploitable. Remedi...

CVE-2020-2911

CVE-2020-2911 affects Oracle VM VirtualBox (Core) prior to 5.2.40, 6.0.20, and 6.1.6. The vulnerability is described as difficult to exploit, but allows a high-privilege attacker with local logon to compromise VirtualBox, with potential takeover and impact on connected products. Public sources in...

CVE-2020-14646

CVE-2020-14646 affects Oracle VM VirtualBox (Core) with affected releases: prior to 5.2.44, prior to 6.0.24, and prior to 6.1.12. The vulnerability is described as difficult to exploit but can allow a high-privilege attacker who can log on to the infrastructure where VirtualBox runs to compromise...

CVE-2020-14647

CVE-2020-14647 affects Oracle VM VirtualBox (Core) with affected branches prior to 5.2.44, 6.0.24, and 6.1.12. The vulnerability, described as difficult to exploit, allows a high-privileged attacker with local access to compromise VirtualBox and may impact other products, potentially leading to t...

CVE-2020-14713

CVE-2020-14713 affects Oracle VM VirtualBox (Core) with affected versions: prior to 5.2.44, prior to 6.0.24, and prior to 6.1.12. A locally authenticated attacker can exploit this vulnerability to compromise VirtualBox, with potential takeover and impacts to confidentiality, integrity, and availa...