PT-2026-3730

CVE-2026-21983

Published

2026-01-01

Updated

2026-05-12

Description by

CVSS 3.1

7.5

High

MetricsAV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions 7.1.14 through 7.2.4

Description A difficult to exploit issue exists within the Core component of Oracle VM VirtualBox. A highly privileged attacker with access to the system where Oracle VM VirtualBox is running can compromise the software. Successful exploitation can lead to a takeover of Oracle VM VirtualBox and may significantly impact other products.

Recommendations Update Oracle VM VirtualBox to a version later than 7.2.4. Update Oracle VM VirtualBox to a version later than 7.1.14.

Exploitability

Fix

Impacts

Researchers

Xiaobye

Vendors

Affected products

Weakness enumeration

CWE-269: Improper Privilege Management

CWE-20: Improper Input Validation

Related identifiers