VM VirtualBox vulnerabilities

67 known vulnerabilities in VM VirtualBox from Oracle. 67 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Oracle VM VirtualBox: Uncontrolled Resource Consumption

  CVE-2026-87277Sep 15, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via RDP to compromise Oracle VM

• 7.5 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-87276Sep 15, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM V

• 8.6 High severity

  Oracle VM VirtualBox: Improper Privilege Management

  CVE-2026-87273Sep 15, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM Vi

• 7.8 High severity

  Oracle VM VirtualBox: Improper Privilege Management

  CVE-2026-87272Sep 15, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM Vir

• 7.8 High severity

  Oracle VM VirtualBox: Improper Privilege Management

  CVE-2026-87271Sep 15, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM Vir

• 7.8 High severity

  Oracle VM VirtualBox: Improper Privilege Management

  CVE-2026-87270Sep 15, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM Vir

• 7.8 High severity

  Oracle VM VirtualBox: Improper Privilege Management

  CVE-2026-87269Sep 15, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM Vir

• 7.8 High severity

  Oracle VM VirtualBox: Improper Privilege Management

  CVE-2026-87268Sep 15, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM Vir

• 7.7 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-71141Aug 18, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM Vi

• 7.3 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-71138Aug 18, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM Vi

• 7.3 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-71136Aug 18, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM Vi

• 8.6 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-71131Aug 18, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM Vi

• 8.2 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-71130Aug 18, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via RDP to compromise Oracle VM

• 8.2 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-71129Aug 18, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM Vi

• 7.8 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-71126Aug 18, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM V

• 7.5 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-71116Aug 18, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM

• 7.5 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-71113Aug 18, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via RDP to compromise Oracle VM

• 7.5 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-60159Jul 21, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM

• 7.5 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-60155Jul 21, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM

• 7.8 High severity

  Oracle VM VirtualBox: Improper Privilege Management

  CVE-2026-60150Jul 21, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM Vir

• 7.8 High severity

  Oracle VM VirtualBox: Improper Privilege Management

  CVE-2026-47054Jul 21, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM Vir

• 7.4 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-47050Jul 21, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM Vir

• 7.8 High severity

  Oracle VM VirtualBox: Improper Privilege Management

  CVE-2026-47047Jul 21, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM Vir

• 7.5 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-46974Jun 17, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.8. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM V

• 7.5 High severity

  Oracle VM VirtualBox: Improper Privilege Management

  CVE-2026-46873Jun 17, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device). The supported version that is affected is 7.2.8. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Or

• 7.5 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-35275Jun 17, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Shared Folders). The supported version that is affected is 7.2.8. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Or

• 7.5 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-35251Apr 21, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM V

• 7.5 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-35246Apr 21, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM V

• 7.5 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-35245Apr 21, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via RDP to compromise Oracle VM

• 7.5 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-35242Apr 21, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM V

• 7.5 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-35230Apr 21, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM V

• 7.5 High severity

  Oracle VM VirtualBox: Improper Access Control

  CVE-2026-21984Jan 20, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where O

• 7.5 High severity

  Oracle VM VirtualBox: Improper Privilege Management

  CVE-2026-21983Jan 20, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where O

• 7.5 High severity

  Oracle VM VirtualBox: Improper Privilege Management

  CVE-2026-21957Jan 20, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where O

• 8.2 High severity

  Oracle VM VirtualBox: Uncontrolled Resource Consumption

  CVE-2026-21956Jan 20, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Ora

• 8.2 High severity

  Oracle VM VirtualBox: Uncontrolled Resource Consumption

  CVE-2026-21955Jan 20, 2026Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Ora

• 8.2 High severity

  Oracle VM VirtualBox: Privilege Defined With Unsafe Actions

  CVE-2025-62641Oct 21, 2025Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Ora

• 8.2 High severity

  Oracle VM VirtualBox: Privilege Defined With Unsafe Actions

  CVE-2025-62590Oct 21, 2025Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Ora

• 8.2 High severity

  Oracle VM VirtualBox: Privilege Defined With Unsafe Actions

  CVE-2025-62589Oct 21, 2025Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Ora

• 8.2 High severity

  Oracle VM VirtualBox: Privilege Defined With Unsafe Actions

  CVE-2025-62588Oct 21, 2025Oracle

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Ora