Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVE-2026-87280)
A vulnerability in Oracle VM VirtualBox version 7.2.16 allows a high privileged attacker with logon access to cause a denial of service (DoS) by triggering a hang or repeated crash. Exploitation requires human interaction from a user other than the attacker. The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 4.2, indicating a medium severity level.
AI Analysis
Technical Summary
CVE-2026-87280 is a vulnerability in the core component of Oracle VM VirtualBox version 7.2.16. It allows an attacker with high privileges and logon access to the infrastructure where VirtualBox runs to cause a hang or repeated crash of the product, resulting in a denial of service condition. Successful exploitation requires user interaction from a third party. The vulnerability impacts availability only and has a CVSS 3.1 score of 4.2 (AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H).
Potential Impact
The vulnerability can cause a complete denial of service (hang or repeated crash) of Oracle VM VirtualBox 7.2.16. It does not impact confidentiality or integrity. Exploitation requires high privileges and user interaction from a different user, limiting the attack vector. There are no known exploits in the wild.
Mitigation Recommendations
Oracle strongly recommends applying security patches promptly. However, the vendor advisory does not explicitly confirm a patch for this specific vulnerability. Patch status is not yet confirmed — check the Oracle Critical Security Patch Update advisories for the latest remediation guidance. Until patched, limit high privileged access and be cautious of social engineering attempts requiring user interaction.
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVE-2026-87280)
Description
A vulnerability in Oracle VM VirtualBox version 7.2.16 allows a high privileged attacker with logon access to cause a denial of service (DoS) by triggering a hang or repeated crash. Exploitation requires human interaction from a user other than the attacker. The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 4.2, indicating a medium severity level.
CVSS v3.1
Score 4.2medium
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-87280 is a vulnerability in the core component of Oracle VM VirtualBox version 7.2.16. It allows an attacker with high privileges and logon access to the infrastructure where VirtualBox runs to cause a hang or repeated crash of the product, resulting in a denial of service condition. Successful exploitation requires user interaction from a third party. The vulnerability impacts availability only and has a CVSS 3.1 score of 4.2 (AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H).
Potential Impact
The vulnerability can cause a complete denial of service (hang or repeated crash) of Oracle VM VirtualBox 7.2.16. It does not impact confidentiality or integrity. Exploitation requires high privileges and user interaction from a different user, limiting the attack vector. There are no known exploits in the wild.
Mitigation Recommendations
Oracle strongly recommends applying security patches promptly. However, the vendor advisory does not explicitly confirm a patch for this specific vulnerability. Patch status is not yet confirmed — check the Oracle Critical Security Patch Update advisories for the latest remediation guidance. Until patched, limit high privileged access and be cautious of social engineering attempts requiring user interaction.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-vw74-3hx5-c5jx
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-87280"]
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6aaa07d855bf5e2cf5ea2d28
Added to database: 09/16/2026, 03:07:04 UTC
Last enriched: 09/16/2026, 03:20:55 UTC
Last updated: 09/16/2026, 03:20:55 UTC
Views: 1
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.