Kun Yang

**Name of the Vulnerable Software and Affected Versions** Oracle VM VirtualBox versions prior to 6.1.44 Oracle VM VirtualBox versions prior to 7.0.8 **Description** The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, allowing a high-privileged attacker with logon access to the infrastructure to compromise Oracle VM VirtualBox. Successful attacks can result in unauthorized update, insert, or delete access to some of Oracle VM VirtualBox's accessible data, as well as unauthorized read access to a subset of Oracle VM VirtualBox's accessible data. This vulnerability applies to Windows VMs only. **Recommendations** For versions prior to 6.1.44, update to version 6.1.44 or later. For versions prior to 7.0.8, update to version 7.0.8 or later.

**Name of the Vulnerable Software and Affected Versions** Oracle VM VirtualBox versions prior to 6.1.42 Oracle VM VirtualBox versions prior to 7.0.6 **Description** The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, which can be exploited by a low-privileged attacker with logon access to the infrastructure where Oracle VM VirtualBox executes. Successful attacks can result in the ability to cause a hang or frequently repeatable crash of Oracle VM VirtualBox, leading to a denial of service. This issue applies to VirtualBox VMs running Windows 7 and later. **Recommendations** For Oracle VM VirtualBox versions prior to 6.1.42, update to version 6.1.42 or later. For Oracle VM VirtualBox versions prior to 7.0.6, update to version 7.0.6 or later. As a temporary workaround, consider restricting access to the Core component of Oracle VM VirtualBox to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Oracle VM VirtualBox versions prior to 6.1.42 Oracle VM VirtualBox versions prior to 7.0.6 **Description** The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, allowing a low-privileged attacker with logon access to the infrastructure to compromise Oracle VM VirtualBox. Successful attacks can result in the ability to cause a hang or frequently repeatable crash of Oracle VM VirtualBox, leading to a denial of service. This issue applies to VirtualBox VMs running Windows 7 and later. **Recommendations** For Oracle VM VirtualBox versions prior to 6.1.42, update to version 6.1.42 or later. For Oracle VM VirtualBox versions prior to 7.0.6, update to version 7.0.6 or later. As a temporary workaround, consider restricting access to the Core component of Oracle VM VirtualBox to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Oracle VM VirtualBox versions prior to 6.1.42 Oracle VM VirtualBox versions prior to 7.0.6 **Description** The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, allowing a low-privileged attacker with logon access to the infrastructure to compromise Oracle VM VirtualBox. Successful attacks can result in unauthorized read access to a subset of Oracle VM VirtualBox accessible data. The vulnerability may also impact additional products due to scope change. **Recommendations** For Oracle VM VirtualBox versions prior to 6.1.42, update to version 6.1.42 or later. For Oracle VM VirtualBox versions prior to 7.0.6, update to version 7.0.6 or later.

**Name of the Vulnerable Software and Affected Versions** Oracle VM VirtualBox versions prior to 6.1.42 and prior to 7.0.6 **Description** The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, allowing a low-privileged attacker with logon access to the infrastructure to compromise Oracle VM VirtualBox. Successful attacks can result in unauthorized read access to a subset of Oracle VM VirtualBox accessible data. This issue may significantly impact additional products and applies to Windows only. **Recommendations** For versions prior to 6.1.42 and prior to 7.0.6, update to a version that addresses this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Oracle VM VirtualBox versions prior to 6.1.40 **Description** The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, allowing a high-privileged attacker with logon to the infrastructure to compromise Oracle VM VirtualBox. Successful attacks can result in unauthorized ability to cause a hang or frequently repeatable crash of Oracle VM VirtualBox. **Recommendations** For versions prior to 6.1.40, update to version 6.1.40 or later to resolve the issue. As a temporary workaround, consider restricting access to the Core component to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Oracle VM VirtualBox versions prior to 6.1.40 **Description** The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, which can be exploited to cause a denial of service. A high-privileged attacker with logon access to the infrastructure where Oracle VM VirtualBox executes can compromise Oracle VM VirtualBox, potentially causing a hang or frequently repeatable crash. This vulnerability may also impact additional products. **Recommendations** For versions prior to 6.1.40, update to version 6.1.40 or later to resolve the issue. As a temporary workaround, consider restricting access to the Core component of Oracle VM VirtualBox to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Oracle VM VirtualBox versions prior to 6.1.40 **Description** The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, allowing a high-privileged attacker with logon to the infrastructure to compromise Oracle VM VirtualBox. Successful attacks can result in the takeover of Oracle VM VirtualBox and may significantly impact additional products. **Recommendations** For versions prior to 6.1.40, update to version 6.1.40 or later to resolve the issue. As a temporary workaround, consider restricting access to the Core component of Oracle VM VirtualBox to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Oracle VM VirtualBox versions prior to 6.1.36 **Description** The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox. This can be exploited by a high-privileged attacker with logon access to the infrastructure where Oracle VM VirtualBox is executed, potentially allowing them to cause a hang or frequently repeatable crash of Oracle VM VirtualBox, resulting in a denial of service. **Recommendations** For versions prior to 6.1.36, update to version 6.1.36 or later to resolve the issue. As a temporary workaround, consider restricting access to the Core component of Oracle VM VirtualBox to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Oracle VM VirtualBox versions prior to 6.1.34 **Description** The issue exists due to insufficient input validation in the Core component of Oracle VM VirtualBox. Exploitation of this issue can allow an attacker to modify, add, or delete data, or cause the system to hang or crash. Successful attacks can result in unauthorized access to some of Oracle VM VirtualBox's accessible data, as well as the ability to cause a hang or repeatable crash of Oracle VM VirtualBox. **Recommendations** For versions prior to 6.1.34, update to version 6.1.34 or later to resolve the issue. As a temporary workaround, consider restricting access to the Core component of Oracle VM VirtualBox to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Oracle VM VirtualBox versions prior to 6.1.34 **Description** The issue exists due to insufficient input validation in the Core component of Oracle VM VirtualBox. Exploitation of this issue can allow an attacker to cause a denial of service, resulting in a hang or frequently repeatable crash of Oracle VM VirtualBox. The vulnerability can be easily exploited by a low-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes. Successful attacks may significantly impact additional products. **Recommendations** For versions prior to 6.1.34, update to version 6.1.34 or later to resolve the issue. As a temporary workaround, consider restricting access to the Core component of Oracle VM VirtualBox to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Oracle VM VirtualBox versions prior to 6.1.32 **Description** The issue allows a low-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox, potentially impacting additional products. Successful attacks can result in unauthorized read access to a subset of Oracle VM VirtualBox accessible data. This issue applies to Windows systems only. **Recommendations** For versions prior to 6.1.32, update to version 6.1.32 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive data and limiting user privileges on the system where Oracle VM VirtualBox is executed.

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 6.1.20 Description: The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox. This can allow an attacker to gain unauthorized access to protected information. The vulnerability can be easily exploited by an unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes, potentially compromising Oracle VM VirtualBox and significantly impacting additional products. Successful attacks can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. Recommendations: For versions prior to 6.1.20, update to version 6.1.20 or later to resolve the issue. As a temporary workaround, consider restricting access to the Core component of Oracle VM VirtualBox to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 6.1.20 Description: The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, which can be exploited to cause a denial of service. This vulnerability allows a high-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox, resulting in the ability to cause a hang or frequently repeatable crash of Oracle VM VirtualBox. The vulnerability specifically affects Windows systems. Recommendations: For versions prior to 6.1.20, update to version 6.1.20 or later to resolve the issue. As a temporary workaround, consider restricting access to the Core component of Oracle VM VirtualBox to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 6.1.20 Description: The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, which can allow an attacker to gain unauthorized access to protected information. This vulnerability can be easily exploited by a high-privileged attacker with logon access to the infrastructure where Oracle VM VirtualBox is executed, potentially compromising Oracle VM VirtualBox and impacting additional products. Successful attacks can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. Recommendations: For versions prior to 6.1.20, update to version 6.1.20 or later to resolve the issue. As a temporary workaround, consider restricting access to the Core component of Oracle VM VirtualBox to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 6.1.20 Description: The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox. This can allow an attacker to gain unauthorized access to protected information. The vulnerability is easily exploitable and can be used by an unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes. Successful attacks can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. Recommendations: For versions prior to 6.1.20, update to version 6.1.20 or later to resolve the issue. As a temporary workaround, consider restricting access to the Core component of Oracle VM VirtualBox to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 6.1.20 Description: The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, allowing an unauthenticated attacker with logon to the infrastructure to compromise Oracle VM VirtualBox. Successful attacks can result in unauthorized creation, deletion, or modification access to critical data or all Oracle VM VirtualBox accessible data. This vulnerability may significantly impact additional products. Recommendations: For versions prior to 6.1.20, update to version 6.1.20 or later to resolve the issue. As a temporary workaround, consider restricting access to the Core component of Oracle VM VirtualBox to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 6.1.20 Description: The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, allowing an unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise it. This can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. The vulnerability may significantly impact additional products. Recommendations: For versions prior to 6.1.20, update to version 6.1.20 or later to resolve the issue. As a temporary workaround, consider restricting access to the Core component of Oracle VM VirtualBox to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Oracle VM VirtualBox versions prior to 6.1.20 **Description** The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox. This can allow an attacker to gain unauthorized access to protected information. The vulnerability can be easily exploited by an unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes, potentially compromising Oracle VM VirtualBox and significantly impacting additional products. Successful attacks can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. **Recommendations** For versions prior to 6.1.20, update to version 6.1.20 or later to resolve the issue. As a temporary workaround, consider restricting access to the Core component of Oracle VM VirtualBox to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Oracle VM VirtualBox versions prior to 6.1.20 **Description** The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, which can allow an attacker to gain unauthorized access to protected information. Successful attacks can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. The vulnerability can be easily exploited by an unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes. **Recommendations** For versions prior to 6.1.20, update to version 6.1.20 or later to resolve the issue. As a temporary workaround, consider restricting access to the Core component of Oracle VM VirtualBox to minimize the risk of exploitation.