This vulnerability exists in the core component of Oracle VM VirtualBox version 7.2.14. A high privileged attacker with logon access to the infrastructure where Oracle VM VirtualBox runs can exploit this flaw to cause the software to hang or crash repeatedly, resulting in a complete denial of service. The vulnerability has a CVSS 3.1 score of 6.0 with vector AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H, indicating local attack vector, low attack complexity, high privileges required, no user interaction, scope change, no confidentiality or integrity impact, but high availability impact. While the vulnerability is specific to Oracle VM VirtualBox, exploitation may impact other products due to scope change. There are no known exploits in the wild and no vendor advisory explicitly states patch availability for this specific version.

Successful exploitation results in a denial of service condition by causing Oracle VM VirtualBox to hang or crash repeatedly. This impacts availability but does not affect confidentiality or integrity. The vulnerability requires high privileges and local access to the infrastructure hosting Oracle VM VirtualBox. The scope change indicates that other products may also be affected indirectly.

The vendor advisory does not explicitly confirm a patch for this specific version 7.2.14. Patch status is not yet confirmed — check the Oracle advisory at https://www.oracle.com/security-alerts/cspuaug2026.html for current remediation guidance. Oracle strongly recommends applying security patches promptly and remaining on actively supported versions. Since this vulnerability requires high privileges and local access, limiting such access and applying available updates are prudent interim measures.