Oracle VM VirtualBox vulnerabilities

Vulnerability in the Oracle VM VirtualBox product (component: Core) in version 7.2.8. Easily exploitable by a high privileged attacker with access to the infrastructure where Oracle VM VirtualBox runs, potentially compromising the software.

Vulnerability in Oracle VM VirtualBox (component: Core), affecting version 7.2.6. An easily exploitable flaw allows a high-privileged attacker with logon to the infrastructure to cause a partial denial of service (partial DoS) of Oracle VM VirtualBox.

Vulnerability in Oracle VM VirtualBox (component: Core), affecting version 7.2.6. An easily exploitable flaw allows a high-privileged attacker with logon to the infrastructure to gain unauthorized update, insert, or delete access to some Oracle VM VirtualBox accessible data; attacks may significantly impact additional products (scope change).

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data as well as unauthorized read access to a subset of Oracle VM VirtualBox accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 5.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L).

Vulnerability in Oracle VM VirtualBox (component: Core) affecting version 7.2.6. An easily exploitable flaw allows a high-privileged attacker with logon to the infrastructure to compromise VirtualBox, potentially leading to unauthorized access to critical data.

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).

Vulnerability in Oracle VM VirtualBox (Core component) affects versions 7.1.12 and 7.2.2. A high-privileged authenticated attacker can exploit it locally, potentially leading to unauthorized access to critical data or all data accessible in VirtualBox.

Vulnerability in Oracle VM VirtualBox (Core component) affects versions 7.1.12 and 7.2.2. A high-privileged authenticated attacker can exploit it locally, potentially leading to unauthorized access to critical data or all data accessible in VirtualBox.

A vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions affected are 7.1.12 and 7.2.2. An easily exploitable vulnerability allows a high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise it. Successful attacks can result in takeover of Oracle VM VirtualBox, and attacks may significantly impact additional products (scope change).

A vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions affected are 7.1.12 and 7.2.2. An easily exploitable vulnerability allows a high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise it. Successful attacks can result in takeover of Oracle VM VirtualBox, and attacks may significantly impact additional products (scope change).

A vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions affected are 7.1.12 and 7.2.2. An easily exploitable vulnerability allows a high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise it. Successful attacks can result in takeover of Oracle VM VirtualBox, and attacks may significantly impact additional products (scope change).

Vulnerability in Oracle VM VirtualBox (Core component) affects versions 7.1.12 and 7.2.2. A high-privileged attacker with local access can compromise VirtualBox. The vulnerability may impact additional products (scope change).

A vulnerability in the Oracle VM VirtualBox product (component: Core) affects versions 7.1.12 and 7.2.2. This difficult-to-exploit flaw allows a low-privileged attacker with logon access to the infrastructure where VirtualBox runs to compromise the product; it requires human interaction from someone other than the attacker and may significantly impact additional products (scope change). Successful exploitation can result in takeover of Oracle VM VirtualBox.

Vulnerability in Oracle VM VirtualBox (component: Core) versions 7.1.12 and 7.2.2. Easily exploitable by a low-privileged attacker with logon to the infrastructure where VirtualBox executes. The attack may impact additional products (scope change) and result in unauthorized access to critical data or complete access to all VirtualBox data. CVSS 6.5.