Threats Tagged 'cve-2026-46815'

CVE-2026-46815 is a vulnerability in Oracle VM VirtualBox version 7.2.8 affecting the VMSVGA device component. It allows a high privileged attacker with logon access to the infrastructure running Oracle VM VirtualBox to compromise the product, potentially impacting additional Oracle products. Successful exploitation can lead to unauthorized read access to some Oracle VM VirtualBox accessible data. The vulnerability has a low severity with a CVSS 3.1 base score of 3.2, indicating limited confidentiality impact and no integrity or availability impact. Oracle has not explicitly stated a patch or fix for this specific version in the advisory but strongly recommends applying Critical Security Patch Updates promptly to mitigate risks. No known exploits are reported in the wild at this time.

CVE-2026-35275 is a high-severity vulnerability in Oracle VM VirtualBox version 7.2.8 affecting the Shared Folders component. It allows a low privileged attacker with logon access to the host infrastructure to compromise Oracle VM VirtualBox. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data accessible by Oracle VM VirtualBox, impacting confidentiality and integrity. The vulnerability has a CVSS 3.1 base score of 7.5. Oracle has included this vulnerability in its June 2026 Critical Security Patch Update, strongly recommending patch application to mitigate risk.