This vulnerability affects Oracle VM VirtualBox 7.2.14 and is exploitable by an attacker with high privileges on the host where VirtualBox runs. Successful exploitation can cause a complete denial of service by hanging or crashing VirtualBox and unauthorized modification or reading of some accessible data. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 score of 7.3. The attack scope includes potential impact on additional products beyond VirtualBox. The vulnerability requires local access with high privileges and no user interaction. Oracle has published a Critical Security Patch Update advisory for August 2026 referencing this vulnerability but does not explicitly confirm patch availability for this specific version in the provided content.

An attacker with high privileges on the host system can cause Oracle VM VirtualBox to hang or crash repeatedly, resulting in a complete denial of service. Additionally, the attacker can gain unauthorized read and write access to some data accessible by Oracle VM VirtualBox, affecting confidentiality and integrity. The vulnerability also has a scope change, meaning it may impact other Oracle products beyond VirtualBox.

Oracle strongly recommends applying security patches promptly and remaining on actively supported versions. The August 2026 Critical Security Patch Update advisory references this vulnerability as part of its fixes. However, explicit patch availability for version 7.2.14 is not confirmed in the provided data. Users should consult the Oracle advisory at https://www.oracle.com/security-alerts/cspuaug2026.html for the latest patch information and apply updates as soon as they become available. Until patched, restrict high privileged access to the infrastructure where Oracle VM VirtualBox executes.