Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:vm_virtualbox:7.2.16:*:*:*:*:*:*:*

part: a version: 7.2.16 update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductVm Virtualbox (617ced06-12d2-56cc-b9bf-e83c9bd34a51)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-87278 vulnerable 2026-09-16 04:33:01.617262 Details available
MEDIUM (6.1)
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H).
Published: 2026-09-15T20:06:37.308Z
Updated: 2026-09-17T15:10:52.323Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-87274 vulnerable 2026-09-16 04:33:01.594884 Details available
MEDIUM (4.4)
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H).
Published: 2026-09-15T20:06:36.049Z
Updated: 2026-09-17T12:50:08.391Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-87285 vulnerable 2026-09-16 04:33:01.586265 Details available
MEDIUM (6)
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 6.0 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H).
Published: 2026-09-15T20:06:39.532Z
Updated: 2026-09-17T15:10:06.917Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-87270 vulnerable 2026-09-16 04:33:01.571167 Details available
HIGH (7.8)
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. Note: This vulnerability applies to Windows host only. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Published: 2026-09-15T20:06:34.797Z
Updated: 2026-09-17T12:50:08.959Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-87268 vulnerable 2026-09-16 04:33:01.554681 Details available
HIGH (7.8)
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. Note: This vulnerability applies to Windows host only. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Published: 2026-09-15T20:06:34.183Z
Updated: 2026-09-17T12:50:09.338Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-87281 vulnerable 2026-09-16 04:33:01.551342 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-87275 vulnerable 2026-09-16 04:33:01.520184 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-87284 vulnerable 2026-09-16 04:33:01.501689 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-87271 vulnerable 2026-09-16 04:33:01.489227 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-87269 vulnerable 2026-09-16 04:33:01.478765 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-87280 vulnerable 2026-09-16 04:33:01.464768 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-87279 vulnerable 2026-09-16 04:33:01.275960 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-87277 vulnerable 2026-09-16 04:33:01.259731 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-87273 vulnerable 2026-09-16 04:33:01.233587 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-87282 vulnerable 2026-09-16 04:33:01.218015 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-87267 vulnerable 2026-09-16 04:33:01.195310 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-87276 vulnerable 2026-09-16 04:33:01.079022 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-87272 vulnerable 2026-09-16 04:33:01.058278 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-87283 vulnerable 2026-09-16 04:33:01.039752 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.