Oracle VM VirtualBox vulnerabilities
104 known CVE vulnerabilities in Oracle VM VirtualBox, translated and rated.
- CVE-2025-62588High
A vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions affected are 7.1.12 and 7.2.2. An easily exploitable vulnerability allows a high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise it. Successful attacks can result in takeover of Oracle VM VirtualBox, and attacks may significantly impact additional products (scope change).
- CVE-2025-62587High
Vulnerability in Oracle VM VirtualBox (Core component) affects versions 7.1.12 and 7.2.2. A high-privileged attacker with local access can compromise VirtualBox. The vulnerability may impact additional products (scope change).
- CVE-2025-61760High
A vulnerability in the Oracle VM VirtualBox product (component: Core) affects versions 7.1.12 and 7.2.2. This difficult-to-exploit flaw allows a low-privileged attacker with logon access to the infrastructure where VirtualBox runs to compromise the product; it requires human interaction from someone other than the attacker and may significantly impact additional products (scope change). Successful exploitation can result in takeover of Oracle VM VirtualBox.
- CVE-2025-61759Medium
Vulnerability in Oracle VM VirtualBox (component: Core) versions 7.1.12 and 7.2.2. Easily exploitable by a low-privileged attacker with logon to the infrastructure where VirtualBox executes. The attack may impact additional products (scope change) and result in unauthorized access to critical data or complete access to all VirtualBox data. CVSS 6.5.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

