Oracle VM VirtualBox vulnerabilities

A vulnerability in Oracle VM VirtualBox (component: Core) affects versions 7.1.14 and 7.2.4. It is easily exploitable by a high privileged attacker with logon to the infrastructure where VirtualBox executes. Successful attacks can result in takeover of VirtualBox, and may significantly impact additional products (scope change). CVSS 3.1 Base Score is 8.2.

A vulnerability in Oracle VM VirtualBox (component: Core) affects versions 7.1.14 and 7.2.4. It is easily exploitable by a high privileged attacker with logon to the infrastructure where VirtualBox executes. Successful attacks can result in unauthorized creation, deletion or modification of data, unauthorized access to data, and partial denial of service. CVSS 3.1 Base Score is 8.1.

Vulnerability in Oracle VM VirtualBox (component: Core) affects versions 7.1.14 and 7.2.4. A high-privileged attacker with local access can take over VirtualBox, and the attack may impact other products (scope change).

Vulnerability in Oracle VM VirtualBox (component: Core) affects versions 7.1.14 and 7.2.4. A high-privileged attacker with local access can take over VirtualBox, and the attack may impact other products (scope change).

Vulnerability in Oracle VM VirtualBox (component: Core) affects versions 7.1.14 and 7.2.4. An unauthenticated attacker with local access can cause a hang or frequently repeatable crash (complete DoS) of VirtualBox. This vulnerability applies to Windows VMs only.

Vulnerability in Oracle VM VirtualBox (component: Core) affects versions 7.1.14 and 7.2.4. A high-privileged attacker with local access can take over VirtualBox, but exploitation is difficult. The attack may impact other products (scope change).

Vulnerability in Oracle VM VirtualBox (component: Core) affects versions 7.1.14 and 7.2.4. A high-privileged attacker with local access can take over VirtualBox, but exploitation is difficult. The attack may impact other products (scope change).

Vulnerability in Oracle VM VirtualBox (component: Core) affects versions 7.1.14 and 7.2.4. An unauthenticated attacker with access to the physical communication segment attached to the hardware where VirtualBox executes can take over VirtualBox. Exploitation is difficult.

Vulnerability in Oracle VM VirtualBox (component: Core) affects versions 7.1.14 and 7.2.4. It is difficult to exploit, requires high-privileged local access, but can lead to full takeover of VirtualBox. Attacks may impact additional products (scope change).

Vulnerability in Oracle VM VirtualBox (component: Core) affects versions 7.1.14 and 7.2.4. An attacker with high privileges and local access to the infrastructure can easily exploit this flaw, potentially leading to takeover of Oracle VM VirtualBox. The vulnerability has a scope change, meaning attacks may also impact additional products.

Vulnerability in Oracle VM VirtualBox (component: Core) affects versions 7.1.14 and 7.2.4. A high-privileged attacker with local access can compromise VirtualBox, potentially impacting additional products (scope change).

Vulnerability in the Oracle VM VirtualBox component affecting versions prior to 5.1.30. It allows a high privileged attacker with access to the infrastructure to compromise Oracle VM VirtualBox, potentially leading to hangs or frequent crashes and unauthorized access to data.

Vulnerability in the Oracle VM VirtualBox component affecting versions prior to 5.1.30. It allows a high privileged attacker with access to the infrastructure to compromise Oracle VM VirtualBox, potentially leading to serious availability and data integrity issues.

Vulnerability in the Oracle VM VirtualBox component affecting versions prior to 5.1.30. It allows a high privileged attacker with access to the infrastructure to compromise Oracle VM VirtualBox, potentially leading to serious availability and data integrity issues.

Vulnerability in the Oracle VM VirtualBox component affecting versions prior to 5.1.24. It allows a high privileged attacker with access to the infrastructure to compromise Oracle VM VirtualBox, potentially leading to serious availability and data integrity issues.

A vulnerability in the Oracle VM VirtualBox component allows a high privileged attacker with access to the infrastructure where Oracle VM VirtualBox runs to compromise the software. The attacker can cause hangs or frequent crashes of Oracle VM VirtualBox and gain unauthorized access to data.

Vulnerability in the Oracle VM VirtualBox component allows a high privileged attacker with access to the infrastructure to compromise Oracle VM VirtualBox. The attacker can cause hangs or frequent crashes, as well as unauthorized access to data.

Vulnerability in the Oracle VM VirtualBox component affecting versions prior to 5.1.24. It allows a high privileged attacker with access to the infrastructure to compromise Oracle VM VirtualBox, potentially leading to serious availability and data integrity issues.

Vulnerability in the Oracle VM VirtualBox component affecting versions prior to 5.1.24. It allows a high privileged attacker with access to the infrastructure to compromise Oracle VM VirtualBox, potentially leading to serious availability and data integrity issues.

Vulnerability in the Oracle VM VirtualBox component allows a high privileged attacker with access to the infrastructure to compromise Oracle VM VirtualBox. The attacker can cause hangs or frequent crashes, as well as unauthorized access to data.

Vulnerability in the Oracle VM VirtualBox component affecting versions prior to 5.1.24. It allows a high privileged attacker with access to the infrastructure to compromise Oracle VM VirtualBox, potentially leading to serious availability and data integrity issues.

Vulnerability in the Oracle VM VirtualBox component affecting versions prior to 5.1.24. It allows a low privileged attacker with access to the infrastructure to compromise Oracle VM VirtualBox, potentially leading to hangs or frequent crashes.

Vulnerability in the Oracle VM VirtualBox component affecting versions prior to 5.1.24. It allows a high privileged attacker with access to the infrastructure to compromise Oracle VM VirtualBox, potentially leading to hangs or frequent crashes.

Vulnerability in the Oracle VM VirtualBox component affecting versions prior to 5.1.24. It allows a low privileged attacker to compromise Oracle VM VirtualBox, potentially impacting additional products.

Vulnerability in the Oracle VM VirtualBox component affecting versions prior to 5.1.24. It allows a low privileged attacker with access to the infrastructure to compromise Oracle VM VirtualBox.

A vulnerability in the Oracle VM VirtualBox component related to shared folders allows a low privileged attacker with access to the infrastructure where Oracle VM VirtualBox runs to compromise the software. The attacker can gain unauthorized access to critical data and cause a hang or crash of Oracle VM VirtualBox.

A vulnerability in the Oracle VM VirtualBox component allows a low privileged attacker with access to the infrastructure where Oracle VM VirtualBox runs to take control of the software. Affected versions are prior to 5.0.38 and prior to 5.1.20.

A vulnerability in the Oracle VM VirtualBox component allows a high privileged attacker with access to the infrastructure to compromise Oracle VM VirtualBox. The attacker can unauthorizedly create, delete, or modify data and cause system crashes.

A vulnerability in the Oracle VM VirtualBox component allows a low privileged attacker with access to the infrastructure where Oracle VM VirtualBox runs to take control of the software. Affects versions prior to 5.0.38 and 5.1.20.

Vulnerability in the Oracle VM VirtualBox component allows a low privileged attacker to take control of Oracle VM VirtualBox. Affected versions are prior to 5.0.38 and prior to 5.1.20.

A vulnerability in the Oracle VM VirtualBox component allows a low privileged attacker with access to the infrastructure where Oracle VM VirtualBox runs to compromise the software. The attacker can cause hangs or frequent crashes of Oracle VM VirtualBox and gain unauthorized access to data.

A vulnerability in the Oracle VM VirtualBox component allows an unauthenticated attacker with access to the infrastructure where Oracle VM VirtualBox runs to compromise the software. The attacker can cause hangs or frequent crashes of Oracle VM VirtualBox and gain unauthorized access to data.

A vulnerability in the Oracle VM VirtualBox component related to shared folders allows a low privileged attacker to gain unauthorized access to data. It affects versions prior to 5.0.34 and prior to 5.1.16.

A vulnerability in the Oracle VM VirtualBox component allows a high privileged attacker with network access to compromise Oracle VM VirtualBox. Human interaction is required, making the attack easily exploitable.

An unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 allows local users to affect confidentiality, integrity, and availability.

Oracle VM VirtualBox before 7.2.8 allows guest OS users to cause an out-of-bounds write in the host OS in pcnetReceiveNoSync in DevPCNet.cpp in the PCNet (Am79C970A) network device model.

Unspecified vulnerability in the Oracle VM VirtualBox component before 5.1.4 in Oracle Virtualization allows remote attackers to affect confidentiality and integrity via vectors related to VRDE.

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox.

Vulnerability in Oracle VM VirtualBox (component: Core) affecting version 7.2.16. An easily exploitable flaw allows a high-privileged attacker with local logon to cause a partial denial of service of Oracle VM VirtualBox, with possible impact on additional products (scope change).

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox.

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox.

Vulnerability in Oracle VM VirtualBox (component: Core) affecting version 7.2.16. An easily exploitable flaw allows a high-privileged attacker with local logon to gain unauthorized read access to a subset of Oracle VM VirtualBox accessible data, with possible impact on additional products (scope change).

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox.

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data.

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data.

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The affected supported version is 7.2.16. An unauthenticated attacker with network access via RDP can cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox.

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The affected supported version is 7.2.16. A difficult-to-exploit vulnerability allows a low-privileged attacker with logon to the infrastructure where VirtualBox executes to compromise it, requiring human interaction and potentially impacting additional products (scope change), leading to takeover.

Vulnerability in Oracle VM VirtualBox (Core component) version 7.2.16. A high-privileged attacker with local access can exploit this flaw, potentially leading to unauthorized data read access and partial denial of service. The attack may impact additional products (scope change).

Vulnerability in Oracle VM VirtualBox (Core component) version 7.2.16. A low-privileged attacker with local access, under difficult exploitation conditions and requiring user interaction, can cause a hang or frequent crashes (complete DoS).

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The affected supported version is 7.2.16. An unauthenticated attacker with logon to the infrastructure where VirtualBox executes can exploit a vulnerability requiring human interaction, potentially leading to takeover of Oracle VM VirtualBox and impacting additional products (scope change).