PT-2026-3731

CVE-2026-21984

·

Published

2026-01-01

·

Updated

2026-05-12

Description by

CVSS 3.1
7.5
High
MetricsAV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions 7.1.14 and 7.2.4
Description A difficult to exploit issue exists in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). An attacker with high privileges who has access to the system where Oracle VM VirtualBox is running can compromise the software. Successful exploitation can lead to a takeover of Oracle VM VirtualBox and may significantly impact other products.
Recommendations Update Oracle VM VirtualBox to a newer version that addresses this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾