VM VirtualBox vulnerabilities | LiveThreat CVE Feed

Product

VM VirtualBox

by Oracle Corporation · last CVE Sep 15, 2026

On CISA KEVExploited in the wildRansomware-linked

481

CVEs

On KEV

10.0

Max CVSS

New 30D

Vulnerabilities481 In the news11 Timeline

Severity mix

Critical 4High 220Medium 176Low 40

Severity

All severities481 Critical4 High220 Medium176 Low40

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add VM VirtualBox to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2020-2681	6.5	0%	Jan 15	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 5.2.0 before 5.2.36; 6.0.0 before 6.0.16; 6.1.0 before 6.1.2
CVE-2019-3026	6.5	1%	Oct 16	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 5.2.0 before 5.2.34; 6.0.0 before 6.0.14
CVE-2019-3021	6.5	1%	Oct 16	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 5.2.0 before 5.2.34; 6.0.0 before 6.0.14
CVE-2019-2863	6.5	0%	Jul 23	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: 5.0.0 before 5.2.32; 6.0.0 before 6.0.10
CVE-2019-2848	6.5	0%	Jul 23	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: 5.0.0 before 5.2.32; 6.0.0 before 6.0.10
CVE-2019-2678	6.5	1%	Apr 23	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: before 5.2.28; 6.0.0 before 6.0.6
CVE-2019-2574	6.5	1%	Apr 23	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: before 5.2.28; 6.0.0 before 6.0.6
CVE-2019-2527	6.5	0%	Jan 16	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: before 5.2.26; 6.0.0 before 6.0.4
CVE-2019-2508	6.5	0%	Jan 16	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: before 5.2.24; 6.0.0
CVE-2019-2451	6.5	1%	Jan 16	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: before 5.2.24; 6.0.0
CVE-2019-2509	6.5	0%	Jan 16	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: before 5.2.24; 6.0.0
CVE-2019-2556	6.5	1%	Jan 16	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: before 5.2.24; 6.0.0
CVE-2019-2554	6.5	1%	Jan 16	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: before 5.2.24; 6.0.0
CVE-2019-2555	6.5	1%	Jan 16	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: before 5.2.24; 6.0.0
CVE-2019-2450	6.5	1%	Jan 16	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: before 5.2.24; 6.0.0
CVE-2026-60158	6.4	0%	Jul 21	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.12
CVE-2026-21982	6.4	0%	Jan 20	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.1.14; 7.2.4
CVE-2020-2678	6.4	0%	Jan 15	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 5.2.0 before 5.2.36; 6.0.0 before 6.0.16; 6.1.0 before 6.1.2
CVE-2018-3091	6.3	1%	Jul 18	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: before 5.2.16
CVE-2016-5545	6.3	1%	Jan 27	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: GUI) Affected: 5.0.0 before 5.0.32; 5.1.0 before 5.1.14
CVE-2026-87279	6.1	0%	Sep 15	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.16
CVE-2026-87278	6.1	0%	Sep 15	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.16
CVE-2026-71125	6.1	0%	Aug 18	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.14
CVE-2026-60162	6.1	0%	Jul 21	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.12
CVE-2026-60161	6.1	0%	Jul 21	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.12
CVE-2025-30719	6.1	0%	Apr 15	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.1.6
CVE-2024-21263	6.1	0%	Oct 15	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 7.0.22; before 7.1.2
CVE-2026-87285	6.0	0%	Sep 15	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.16
CVE-2026-87283	6.0	0%	Sep 15	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.16
CVE-2026-87282	6.0	0%	Sep 15	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.16
CVE-2026-71137	6.0	0%	Aug 18	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.14
CVE-2026-71135	6.0	0%	Aug 18	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.14
CVE-2026-71128	6.0	0%	Aug 18	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.14
CVE-2026-71127	6.0	0%	Aug 18	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.14
CVE-2026-71115	6.0	0%	Aug 18	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.14
CVE-2026-71114	6.0	0%	Aug 18	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.14
CVE-2026-47041	6.0	0%	Jul 21	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.12
CVE-2026-46877	6.0	0%	Jun 16	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device) Affected: 7.2.8
CVE-2026-46825	6.0	0%	Jun 16	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device) Affected: 7.2.8
CVE-2026-46768	6.0	0%	Jun 16	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device) Affected: 7.2.8
CVE-2026-35247	6.0	0%	Apr 21	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.6
CVE-2026-21985	6.0	0%	Jan 20	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.1.14; 7.2.4
CVE-2026-21963	6.0	0%	Jan 20	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.1.4; 7.2.4
CVE-2025-62592	6.0	0%	Oct 21	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.1.12; 7.2.2
CVE-2025-62591	6.0	0%	Oct 21	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.1.12; 7.2.2
CVE-2025-53030	6.0	0%	Jul 15	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.1.10
CVE-2025-53026	6.0	0%	Jul 15	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.1.10
CVE-2025-53025	6.0	0%	Jul 15	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.1.10
CVE-2024-21273	6.0	0%	Oct 15	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 7.0.22; before 7.1.2
CVE-2023-22002	6.0	0%	Apr 18	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.44; 7.0.0 before 7.0.8