CVE-2026-87281

Oracle VM VirtualBox (component: Core ), version 7.2.16 , is affected by a local vulnerability requiring high-privileged attacker access to the host. The attack vector is local with low complexity and no user interaction. A successful exploit results in unauthorized read access to a subset of Vir...

CVE-2026-87283

CVE-2026-87283 affects the Core component of Oracle VM VirtualBox version 7.2.16 . The vulnerability is easily exploitable by a high-privileged local attacker and results in a complete denial of service (hang or repeatable crash). A notable aspect is the scope change : while the flaw resides in V...

CVE-2026-87279

Oracle VM VirtualBox 7.2.16 (component: Core ) is affected by a local vulnerability that allows a low-privileged attacker with logon access to cause a complete denial of service (hang or frequently repeatable crash) and unauthorized modification, insertion, or deletion of accessible data. The CVS...

CVE-2026-87278

Oracle VM VirtualBox 7.2.16 (component: Core ) is affected by a local vulnerability allowing an unauthenticated attacker with logon to the host to trigger a complete denial of service (hang or repeatable crash) and unauthorized modification of accessible data. The attack requires user interaction...

CVE-2026-87280

Oracle VM VirtualBox (Oracle Virtualization), Core component, version 7.2.16 , contains an easily exploitable vulnerability that allows a high-privileged local attacker to cause a complete denial of service (hang or frequently repeatable crash). The attack requires user interaction from someone o...

CVE-2026-87275

Oracle VM VirtualBox (Oracle Virtualization), component Core , version 7.2.16 is affected by a vulnerability rated CVSS 3.1 4.6 (Medium) . A high-privileged local attacker with logon to the infrastructure can exploit it with low complexity, resulting in unauthorized read access to a subset of Vir...

CVE-2026-87277

Oracle VM VirtualBox (component: Core , version 7.2.16 ) is affected by an easily exploitable denial-of-service vulnerability. An unauthenticated attacker with network access via RDP can cause a hang or frequently repeatable crash, resulting in a complete DoS. The CVSS 3.1 base score is 7.5 (HIGH...

CVE-2026-87276

Oracle VM VirtualBox 7.2.16 (component: Core ) is affected by a local vulnerability that allows a low-privileged attacker with logon access to the host to achieve full takeover of the product, with high impact on confidentiality, integrity, and availability . The attack is rated difficult to expl...

CVE-2026-87274

Oracle VM VirtualBox (component: Core ) version 7.2.16 is affected by a local vulnerability that allows a low-privileged attacker with logon access to cause a complete denial of service (hang or frequently repeatable crash). The attack is rated as difficult to exploit , requiring human interactio...

CVE-2026-87272

Oracle VM VirtualBox 7.2.16 (component: Core ) is affected by a local privilege escalation vulnerability (CVE-2026-87272). A low-privileged attacker with logon access to the host can exploit this with low complexity and no user interaction to achieve full confidentiality, integrity, and availabil...

CVE-2026-87273

This vulnerability affects the Core component of Oracle VM VirtualBox version 7.2.16 (Oracle Virtualization). An unauthenticated attacker with local access to the host infrastructure can exploit it with low complexity, though user interaction is required. The vulnerability allows takeover of Orac...

CVE-2026-87271

A vulnerability in the Core component of Oracle VM VirtualBox version 7.2.16 (Windows host only) allows a low-privileged local attacker to achieve takeover of the product. The CVSS 3.1 score is 7.8 (HIGH) , with low attack complexity, no user interaction required, and high impact on confidentiali...

CVE-2026-87270

Oracle VM VirtualBox version 7.2.16 (component: Core , Windows host only ) is affected by a local vulnerability that allows a low-privileged attacker with logon access to achieve full takeover of the VirtualBox environment. The attack requires local access, has low complexity, and no user interac...

CVE-2026-87269

CVE-2026-87269 affects Oracle VM VirtualBox 7.2.16 (component: Core ), applying to Windows hosts only . An easily exploitable vulnerability allows a low-privileged local attacker with logon to the host to achieve full takeover of VirtualBox, impacting confidentiality, integrity, and availability ...

CVE-2026-87268

Oracle VM VirtualBox (component: Core ), version 7.2.16 , is affected by a local vulnerability that allows a low-privileged attacker with logon access to fully compromise the host (Confidentiality, Integrity, and Availability impacts all rated High ). The attack vector is local with low complexit...

CVE-2026-87266

Oracle Agile PLM (Oracle Supply Chain), specifically the Application Server component in version 9.3.6 , is vulnerable to an easily exploitable, unauthenticated network attack via HTTP . A successful attack can result in unauthorized access to critical data or complete access to all Agile PLM-acc...

CVE-2026-87267

Oracle VM VirtualBox (Oracle Virtualization), component Core , version 7.2.16 is affected by a denial-of-service vulnerability. A low-privileged attacker with network access via RDP can trigger a hang or frequently repeatable crash, resulting in a complete loss of availability. The attack complex...

CVE-2026-87265

CVE-2026-87265 affects the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue ), versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise Oracle Purchasing, resulting in unauthorized creation, d...

CVE-2026-87264

CVE-2026-87264 affects the Integration Broker component of Oracle PeopleSoft Enterprise PeopleTools , versions 8.61 through 8.63 . The vulnerability is exploitable over the network via HTTP by a low-privileged attacker without user interaction, resulting in unauthorized creation, deletion, or mod...

CVE-2026-87261

CVE-2026-87261 affects Oracle Agile Engineering Data Management (Oracle Supply Chain), specifically the Engineering Communication Interface component in supported version 6.2.1 . A low-privileged attacker with local logon can exploit this vulnerability to achieve unauthorized access to critical d...