Oracle VM VirtualBox vulnerabilities

52 known vulnerabilities in Oracle VM VirtualBox from Oracle. 52 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.4 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-87322Oct 20, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.20. Easily exploitable vulnerability allows high privileged attacker with access to the physical communication segment a

• 8.4 High severity

  Oracle VM VirtualBox: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-87301Oct 20, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM Vir

• 7.5 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-101599Oct 20, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.20. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM V

• 7.8 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-101598Oct 20, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.20. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM Vir

• 7.5 High severity

  Oracle VM VirtualBox: Uncontrolled Resource Consumption

  CVE-2026-87277Sep 15, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via RDP to compromise Oracle VM

• 7.5 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-87276Sep 15, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM V

• 8.6 High severity

  Oracle VM VirtualBox: Improper Privilege Management

  CVE-2026-87273Sep 15, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM Vi

• 7.8 High severity

  Oracle VM VirtualBox: Improper Privilege Management

  CVE-2026-87272Sep 15, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM Vir

• 7.8 High severity

  Oracle VM VirtualBox: Improper Privilege Management

  CVE-2026-87271Sep 15, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM Vir

• 7.8 High severity

  Oracle VM VirtualBox: Improper Privilege Management

  CVE-2026-87270Sep 15, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM Vir

• 7.8 High severity

  Oracle VM VirtualBox: Improper Privilege Management

  CVE-2026-87269Sep 15, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM Vir

• 7.8 High severity

  Oracle VM VirtualBox: Improper Privilege Management

  CVE-2026-87268Sep 15, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM Vir

• 7.7 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-71141Aug 18, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM Vi

• 7.3 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-71138Aug 18, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM Vi

• 7.3 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-71136Aug 18, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM Vi

• 8.6 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-71131Aug 18, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM Vi

• 8.2 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-71130Aug 18, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via RDP to compromise Oracle VM

• 8.2 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-71129Aug 18, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM Vi

• 7.8 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-71126Aug 18, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM V

• 7.5 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-71116Aug 18, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM

• 7.5 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-71113Aug 18, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via RDP to compromise Oracle VM

• 7.5 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-60159Jul 21, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM

• 7.5 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-60155Jul 21, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM

• 7.8 High severity

  Oracle VM VirtualBox: Improper Privilege Management

  CVE-2026-60150Jul 21, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM Vir

• 7.8 High severity

  Oracle VM VirtualBox: Improper Privilege Management

  CVE-2026-47054Jul 21, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM Vir

• 7.4 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-47050Jul 21, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM Vir

• 7.8 High severity

  Oracle VM VirtualBox: Improper Privilege Management

  CVE-2026-47047Jul 21, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM Vir

• 7.5 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-46974Jun 17, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.8. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM V

• 7.5 High severity

  Oracle VM VirtualBox: Improper Privilege Management

  CVE-2026-46873Jun 17, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device). The supported version that is affected is 7.2.8. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Or

• 7.5 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-35275Jun 17, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Shared Folders). The supported version that is affected is 7.2.8. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Or

• 7.5 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-35251Apr 21, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM V

• 7.5 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-35246Apr 21, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM V

• 7.5 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-35245Apr 21, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via RDP to compromise Oracle VM

• 7.5 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-35242Apr 21, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM V

• 7.5 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-35230Apr 21, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM V

• 7.5 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-21984Jan 20, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where O

• 7.5 High severity

  Oracle VM VirtualBox: Improper Privilege Management

  CVE-2026-21983Jan 20, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where O

• 7.5 High severity

  Oracle VM VirtualBox: Improper Privilege Management

  CVE-2026-21957Jan 20, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where O

• 8.2 High severity

  Oracle VM VirtualBox: Uncontrolled Resource Consumption

  CVE-2026-21956Jan 20, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Ora

• 8.2 High severity

  Oracle VM VirtualBox: Uncontrolled Resource Consumption

  CVE-2026-21955Jan 20, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Ora