GCVE - cpe:2.3:a:oracle:vm_virtualbox:4.1.28:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:vm_virtualbox:4.1.28:*:*:*:*:*:*:*

part: a version: 4.1.28 update: *

Vendor	Oracle (`3509f9eb-d8a0-57da-b153-b8021021b133`)
Product	Vm Virtualbox (`617ced06-12d2-56cc-b9bf-e83c9bd34a51`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/mirror/vbox`	purl2cpe	2026-06-01 10:18:14.885510
`pkg:oracle/vm/virtualbox-downloads`	purl2cpe	2026-06-01 10:18:14.885511
`pkg:virtualbox/vbox`	purl2cpe	2026-06-01 10:18:14.885512

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-0418`	vulnerable	2026-06-08 05:06:21.506805	Details available Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.26, 4.0.28, 4.1.36, and 4.2.28 allows local users to affect availability via unknown vectors related to Core, a different vulnerability than CVE-2015-0377. Published: 2015-01-21T19:00:00.000Z Updated: 2024-08-06T04:10:10.257Z Open on db.gcve.eu Reference links https://security.gentoo.org/glsa/201612-27 http://www.securityfocus.com/bid/72194 http://secunia.com/advisories/62694 http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html https://exchange.xforce.ibmcloud.com/vulnerabilities/100182	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-0377`	vulnerable	2026-06-08 05:06:21.394902	Details available Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.26, 4.0.28, 4.1.36, and 4.2.28 allows local users to affect availability via unknown vectors related to Core, a different vulnerability than CVE-2015-0418. Published: 2015-01-21T18:00:00.000Z Updated: 2024-08-06T04:10:09.548Z Open on db.gcve.eu Reference links https://security.gentoo.org/glsa/201612-27 http://secunia.com/advisories/62694 http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html http://www.c7zero.info/stuff/csw2017_ExploringYourSystemDeeper_updated.pdf http://www.securityfocus.com/bid/72219	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-6540`	vulnerable	2026-06-08 05:05:57.914102	Details available Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.1.34, before 4.2.26, and before 4.3.14 allows local users to affect availability via vectors related to Graphics driver (WDDM) for Windows guests. Published: 2014-10-15T22:03:00.000Z Updated: 2024-08-06T12:17:24.377Z Open on db.gcve.eu Reference links http://secunia.com/advisories/61582 http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html http://www.securityfocus.com/bid/70493 http://www.securitytracker.com/id/1031034	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-4261`	vulnerable	2026-06-08 05:05:44.506076	Details available Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.14 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-2487. Published: 2014-07-17T10:00:00.000Z Updated: 2024-08-06T11:12:34.040Z Open on db.gcve.eu Reference links http://www.vmware.com/security/advisories/VMSA-2014-0012.html http://www.securityfocus.com/archive/1/534161/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/94612 http://www.securityfocus.com/bid/68588 http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-4228`	vulnerable	2026-06-08 05:05:44.422444	Details available Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.1.34, 4.2.26, and 4.3.12 allows local users to affect confidentiality, integrity, and availability via vectors related to Graphics driver (WDDM) for Windows guests. Published: 2014-07-17T02:36:00.000Z Updated: 2024-08-06T11:12:34.112Z Open on db.gcve.eu Reference links http://www.vmware.com/security/advisories/VMSA-2014-0012.html http://www.securityfocus.com/archive/1/534161/100/0/threaded http://www.securityfocus.com/bid/68601 http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html http://seclists.org/fulldisclosure/2014/Dec/23	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-2489`	vulnerable	2026-06-08 05:05:28.899608	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-2488`	vulnerable	2026-06-08 05:05:28.898466	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-2486`	vulnerable	2026-06-08 05:05:28.896194	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-2477`	vulnerable	2026-06-08 05:05:28.871037	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-2441`	vulnerable	2026-06-08 05:05:28.812293	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.