Diego Palacios

**Name of the Vulnerable Software and Affected Versions** Oracle VM VirtualBox version 7.2.14 **Description** A flaw in the Core component allows an unauthenticated attacker with access to the infrastructure where the software executes to compromise the system. Successful exploitation requires human interaction and can lead to a full takeover of the application, potentially impacting additional products due to a scope change. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Oracle VM VirtualBox version 7.2.14 **Description** An issue in the Core component allows an unauthenticated attacker with access to the infrastructure where the software executes to compromise the system. Successful exploitation requires human interaction and can lead to unauthorized creation, deletion, or modification of critical data, as well as unauthorized read access to a subset of accessible data. Additionally, this may result in a partial denial of service (DOS), a condition where the system becomes partially unavailable or unresponsive to requests. The impact may extend beyond the software to affect additional products. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Oracle VM VirtualBox version 7.2.8 **Description** An issue exists in the Shared Folders component of Oracle VM VirtualBox. A low-privileged attacker with logon access to the infrastructure where the software executes can compromise the system. Although the flaw is located within Oracle VM VirtualBox, successful exploitation may significantly impact additional products. This can lead to unauthorized access, creation, deletion, or modification of critical data or all data accessible by Oracle VM VirtualBox. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.