CVE-2026-71151 is a vulnerability in the core component of Oracle VM VirtualBox version 7.2.14. It allows a low privileged attacker with local logon access to the infrastructure running Oracle VM VirtualBox to compromise the product, resulting in unauthorized access to critical data. The vulnerability has a CVSS 3.1 score of 5.6 with vector AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N, indicating local attack vector, high attack complexity, low privileges required, no user interaction, scope change, and high confidentiality impact without integrity or availability impact. The vulnerability may also affect additional products due to scope change. There is no vendor advisory explicitly confirming patch availability for this specific version in the provided data.

Successful exploitation can lead to unauthorized access to critical data within Oracle VM VirtualBox, potentially compromising confidentiality. The vulnerability does not impact integrity or availability. The attack requires local access with low privileges and has high attack complexity, limiting the ease of exploitation. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the Oracle vendor advisory for current remediation guidance. Oracle strongly recommends applying security patches promptly and remaining on actively-supported versions. Since no explicit patch information is provided for this specific vulnerability, users should monitor Oracle's Critical Security Patch Updates and apply relevant patches when available.