Oracle VM VirtualBox vulnerabilities

52 known vulnerabilities in Oracle VM VirtualBox from Oracle. 52 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  Oracle VM VirtualBox: Privilege Defined With Unsafe Actions

  CVE-2025-62641Oct 21, 2025Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Ora

• 8.2 High severity

  Oracle VM VirtualBox: Privilege Defined With Unsafe Actions

  CVE-2025-62590Oct 21, 2025Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Ora

• 8.2 High severity

  Oracle VM VirtualBox: Privilege Defined With Unsafe Actions

  CVE-2025-62589Oct 21, 2025Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Ora

• 8.2 High severity

  Oracle VM VirtualBox: Privilege Defined With Unsafe Actions

  CVE-2025-62588Oct 21, 2025Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Ora

• 8.2 High severity

  Oracle VM VirtualBox: Privilege Defined With Unsafe Actions

  CVE-2025-62587Oct 21, 2025Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Ora

• 7.5 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2025-61760Oct 21, 2025Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Or

• 8.2 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2025-53028Jul 15, 2025Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.1.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM Vi

• 8.2 High severity

  Oracle VM VirtualBox: Improper Privilege Management

  CVE-2025-53027Jul 15, 2025Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.1.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM Vi

• 8.2 High severity

  Oracle VM VirtualBox: Improper Privilege Management

  CVE-2025-53024Jul 15, 2025Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.1.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM Vi

• 8.1 High severity

  Oracle VM VirtualBox: Integer Overflow or Wraparound

  CVE-2025-30712Apr 15, 2025Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.1.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM Vir

• 7.3 High severity

  Oracle VM VirtualBox: Incorrect Permission Assignment for Critical Resource

  CVE-2025-21571Jan 21, 2025Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.24 and prior to 7.1.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infras

• 7.5 High severity

  Oracle VM VirtualBox: Incorrect Authorization

  CVE-2024-21259Oct 15, 2024Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.22 and prior to 7.1.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the infr