Anhdaden

The issue is related to an out-of-bounds read vulnerability in the Shader functionality. A malicious actor with non-administrative local access to a virtual machine with 3D graphics enabled may be able to exploit this vulnerability to crash the virtual machine's vmx process, leading to a partial denial of service condition.

The issue is related to insecure privilege management in the Core component of Oracle VM VirtualBox. It allows a high-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks can result in the takeover of Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products.

The issue is related to insufficient access control in the Core component of Oracle VM VirtualBox, allowing a high-privileged attacker with logon access to the infrastructure to compromise Oracle VM VirtualBox. Successful attacks can result in the takeover of Oracle VM VirtualBox and may significantly impact additional products.

The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, specifically in the e1000 virtual network interface. This allows a high-privileged attacker with logon access to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks can result in the takeover of Oracle VM VirtualBox. The vulnerability may also impact additional products.

The issue is related to the Oracle VM VirtualBox product, specifically the Core component. It allows a high-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox, potentially resulting in unauthorized read access to a subset of Oracle VM VirtualBox accessible data. The vulnerability may significantly impact additional products. The `vmsvgaR3FifoUpdateCursor` function of the virtual machine is associated with a lack of protection of service data, which can be exploited to gain unauthorized access to protected information.

The issue is related to a lack of protection for internal data in the Core component of Oracle VM VirtualBox. This can be exploited by an attacker to impact the confidentiality, integrity, and availability of protected information. The vulnerability can be easily exploited by a high-privileged attacker with logon access to the infrastructure where Oracle VM VirtualBox is executed, potentially leading to a takeover of Oracle VM VirtualBox.

The issue is related to insufficient input validation in the D3D9 virtual machine objects of Oracle VM VirtualBox, allowing a low-privileged attacker with logon to the infrastructure to compromise Oracle VM VirtualBox. Successful attacks can result in the takeover of Oracle VM VirtualBox and may significantly impact additional products.

The issue is related to insufficient access control in the Core component of Oracle VM VirtualBox, allowing an attacker to gain unauthorized access to protected information. This vulnerability can be easily exploited by a low-privileged attacker with logon access to the infrastructure where Oracle VM VirtualBox is executed, potentially compromising Oracle VM VirtualBox and impacting additional products. Successful attacks may result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data.

A vulnerability in the Oracle VM VirtualBox product allows a highly privileged attacker with logon to the infrastructure where Oracle VM VirtualBox is executed to compromise it. The vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. Although the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products.

The issue allows a low-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks can result in the takeover of Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products.