PT-2026-3703

CVE-2026-21955

Published

2026-01-01

Updated

2026-07-16

Description by

CVSS 3.1

8.2

High

MetricsAV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions 7.1.14 and 7.2.4

Description An easily exploitable issue exists in the Oracle VM VirtualBox Core component, potentially allowing a high-privileged attacker with access to the system where Oracle VM VirtualBox runs to compromise the software. Successful exploitation can lead to a takeover of Oracle VM VirtualBox, and may significantly impact additional products.

Recommendations Update Oracle VM VirtualBox version 7.1.14 to a later version. Update Oracle VM VirtualBox version 7.2.4 to a later version.

Exploitability

Exploit

Fix

Impacts

Researchers

Gangnam Kim

Sangbin Kim

Un3Xploitable

Vendors

Affected products

Weakness enumeration