VV
Product
VM VirtualBox
On CISA KEVExploited in the wildRansomware-linked
481
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 4High 220Medium 176Low 40
Watch
Add VM VirtualBox to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-2446 | 5.5 | Jan 16 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: before 5.2.24; 6.0.0 |
| CVE-2019-2448 | 5.5 | Jan 16 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: before 5.2.24; 6.0.0 |
| CVE-2016-5608 | 5.5 | Oct 25 | Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect availability via vectors… Affected: 5.0.0 before 5.0.28; 5.1.0 before 5.1.8 |
| CVE-2016-3597 | 5.5 | Jul 21 | Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.26 allows local users to affect availability via vectors related to… Affected: through 5.0.24 |
| CVE-2026-87267 | 5.3 | Sep 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.16 |
| CVE-2026-71132 | 5.3 | Aug 18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.14 |
| CVE-2024-21248 | 5.3 | Oct 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 7.0.22; before 7.1.2 |
| CVE-2021-2297 | 5.3 | Apr 22 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.20 |
| CVE-2021-2296 | 5.3 | Apr 22 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.20 |
| CVE-2020-14700 | 5.3 | Jul 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 5.2.44; 6.0.0 before 6.0.24; 6.1.0 before 6.1.12 |
| CVE-2020-14698 | 5.3 | Jul 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 5.2.44; 6.0.0 before 6.0.24; 6.1.0 before 6.1.12 |
| CVE-2020-14695 | 5.3 | Jul 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 5.2.44; 6.0.0 before 6.0.24; 6.1.0 before 6.1.12 |
| CVE-2020-14694 | 5.3 | Jul 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 5.2.44; 6.0.0 before 6.0.24; 6.1.0 before 6.1.12 |
| CVE-2020-14673 | 5.3 | Jul 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 5.2.44; 6.0.0 before 6.0.24; 6.1.0 before 6.1.12 |
| CVE-2020-14650 | 5.3 | Jul 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 5.2.44; 6.0.0 before 6.0.24; 6.1.0 before 6.1.12 |
| CVE-2020-14648 | 5.3 | Jul 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 5.2.44; 6.0.0 before 6.0.24; 6.1.0 before 6.1.12 |
| CVE-2020-2693 | 5.3 | Jan 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 5.2.0 before 5.2.36; 6.0.0 before 6.0.16; 6.1.0 before 6.1.2 |
| CVE-2015-3195 | 5.3 | Dec 6 | The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors… Affected: before 4.3.36; 5.0.0 before 5.0.14 |
| CVE-2017-10209 | 5.2 | Aug 8 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: through 5.1.22 |
| CVE-2026-35248 | 5.0 | Apr 21 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.6 |
| CVE-2020-14712 | 5.0 | Jul 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 5.2.44; 6.0.0 before 6.0.24; 6.1.0 before 6.1.12 |
| CVE-2020-14707 | 5.0 | Jul 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 5.2.44; 6.0.0 before 6.0.24; 6.1.0 before 6.1.12 |
| CVE-2017-10428 | 5.0 | Oct 19 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: through 5.1.28 |
| CVE-2021-2291 | 4.7 | Apr 22 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.20 |
| CVE-2018-5407 | 4.7 | Nov 15 | Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention' Affected: before 6.0.0 |
| CVE-2026-87275 | 4.6 | Sep 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.16 |
| CVE-2026-21981 | 4.6 | Jan 20 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.1.14; 7.2.4 |
| CVE-2023-22001 | 4.6 | Apr 18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.44; 7.0.0 before 7.0.8 |
| CVE-2023-22000 | 4.6 | Apr 18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.44; 7.0.0 before 7.0.8 |
| CVE-2023-21998 | 4.6 | Apr 18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.44; 7.0.0 before 7.0.8 |
| CVE-2021-2125 | 4.6 | Jan 20 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.18 |
| CVE-2017-10187 | 4.6 | Aug 8 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: through 5.1.22 |
| CVE-2026-87274 | 4.4 | Sep 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.16 |
| CVE-2026-71139 | 4.4 | Aug 18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.14 |
| CVE-2023-21884 | 4.4 | Jan 18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.42; 7.0.0 before 7.0.6 |
| CVE-2022-21627 | 4.4 | Oct 18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.40 |
| CVE-2022-21554 | 4.4 | Jul 19 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.36 |
| CVE-2021-35542 | 4.4 | Oct 20 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.28 |
| CVE-2021-2475 | 4.4 | Oct 20 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.28 |
| CVE-2021-2312 | 4.4 | Apr 22 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.20 |
| CVE-2021-2130 | 4.4 | Jan 20 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.18 |
| CVE-2021-2127 | 4.4 | Jan 20 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.18 |
| CVE-2021-2073 | 4.4 | Jan 20 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.18 |
| CVE-2020-14715 | 4.4 | Jul 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 5.2.44; 6.0.0 before 6.0.24; 6.1.0 before 6.1.12 |
| CVE-2020-14714 | 4.4 | Jul 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 5.2.44; 6.0.0 before 6.0.24; 6.1.0 before 6.1.12 |
| CVE-2016-5613 | 4.3 | Oct 25 | Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect availability via vectors… Affected: 5.0.0 before 5.0.28; 5.1.0 before 5.1.8 |
| CVE-2016-5611 | 4.3 | Oct 25 | Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect confidentiality via… Affected: 5.0.0 before 5.0.28; 5.1.0 before 5.1.8 |
| CVE-2026-87280 | 4.2 | Sep 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.16 |
| CVE-2023-22016 | 4.2 | Jul 18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 6.0.0 before 6.1.46; 7.0.0 before 7.0.10 |
| CVE-2018-3005 | 4.0 | Jul 18 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: before 5.2.16 |