CVE-2025-21533

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 7.0.24 Oracle VM VirtualBox versions prior to 7.1.6

Description A flaw in the Core component of Oracle VM VirtualBox involves authorization mechanism deficiencies and a speculative store bypass. This allows a low-privileged local attacker with access to the infrastructure where the software executes to compromise the system. Exploitation can be achieved via cache-based side-channel attacks, potentially resulting in unauthorized access to critical data or complete access to all data accessible by Oracle VM VirtualBox.

Recommendations Update to version 7.0.24 or later. Update to version 7.1.6 or later.