CVE-2026-46877

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.2.8

Description An issue exists in the VMSVGA device component of Oracle VM VirtualBox. A high-privileged attacker with logon access to the infrastructure where the software executes can compromise the system. This may lead to a scope change, significantly impacting additional products and resulting in unauthorized access to critical data or complete access to all accessible data within Oracle VM VirtualBox.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.