CVE-2026-71131

HighCVSS 8.6

Published: 18/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

6th percentile - higher than 6% of all known CVEs

Summary

Vulnerability in Oracle VM VirtualBox (component: Core) version 7.2.14. An unauthenticated attacker with local access can exploit this, requiring user interaction, potentially leading to takeover of Oracle VM VirtualBox.

Risk Assessment

Risk includes full compromise of the virtualization system, potentially leading to confidentiality, integrity, and availability breaches, with possible impact on other products.

Recommendation

Apply patches and educate users on safe practices to avoid interacting with untrusted content.

Original NVD description (English source)

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).