Threats Tagged 'cve-2026-46768'

CVE-2026-46768 is a vulnerability in Oracle VM VirtualBox version 7.2.8 affecting the VMSVGA device component. A high privileged attacker with logon access to the infrastructure where Oracle VM VirtualBox runs can exploit this vulnerability to cause a hang or frequent crashes, resulting in a complete denial of service (DoS). The vulnerability impacts availability but does not affect confidentiality or integrity. The vulnerability has a CVSS 3.1 base score of 6.0, indicating medium severity. Oracle has included this vulnerability in its June 2026 Critical Security Patch Update advisory but has not explicitly confirmed patch availability for this specific issue. Oracle strongly recommends applying Critical Security Patch Updates promptly to mitigate risks. No known exploits in the wild have been reported for this vulnerability.

CVE-2026-35275 is a high-severity vulnerability in Oracle VM VirtualBox version 7.2.8 affecting the Shared Folders component. It allows a low privileged attacker with logon access to the host infrastructure to compromise Oracle VM VirtualBox. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data accessible by Oracle VM VirtualBox, impacting confidentiality and integrity. The vulnerability has a CVSS 3.1 base score of 7.5. Oracle has included this vulnerability in its June 2026 Critical Security Patch Update, strongly recommending patch application to mitigate risk.