PT-2026-3731
CVE-2026-21984
·
Published
2026-01-01
·
Updated
2026-05-12
Description by
CVSS 3.1
7.5
HighMetricsAV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Oracle VM VirtualBox versions 7.1.14 and 7.2.4
Description
A difficult to exploit issue exists in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). An attacker with high privileges who has access to the system where Oracle VM VirtualBox is running can compromise the software. Successful exploitation can lead to a takeover of Oracle VM VirtualBox and may significantly impact other products.
Recommendations
Update Oracle VM VirtualBox to a newer version that addresses this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾