CVE-2026-87276

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.2.16

Description A flaw in the SharedClipboard service allows a low-privileged attacker with access to the infrastructure where the software executes to compromise the system. This issue enables a guest-to-host VM escape, potentially resulting in a full takeover of the environment. Successful exploitation requires human interaction from a user other than the attacker and may impact additional products due to a scope change.

Recommendations Update Oracle VM VirtualBox version 7.2.16 to the version provided in the Oracle CPU September 2026.