Threats affecting pkg:maven/com.oracle.virtualization/virtualbox

A vulnerability in Oracle VM VirtualBox version 7.2.16 allows a low privileged attacker with network access via RDP to cause a denial of service by hanging or crashing the application. This vulnerability affects availability but does not impact confidentiality or integrity. The CVSS 3.1 base score is 5.3, indicating medium severity. Multiple versions of VirtualBox, including 7.2.16 and various older versions, are affected. Oracle has released security patches as part of their Critical Security Patch Update in September 2026, and customers are strongly advised to apply these patches promptly.