CVE-2026-71141

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.2.14

Description An issue in the Core component allows an unauthenticated attacker with access to the infrastructure where the software executes to compromise the system. Successful exploitation requires human interaction and can lead to unauthorized creation, deletion, or modification of critical data, as well as unauthorized read access to a subset of accessible data. Additionally, this may result in a partial denial of service (DOS), a condition where the system becomes partially unavailable or unresponsive to requests. The impact may extend beyond the software to affect additional products.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.