Threats Tagged 'cve-2026-46825'

CVE-2026-46825 is a vulnerability in Oracle VM VirtualBox version 7.2.8 affecting the VMSVGA device component. It allows a high privileged attacker with logon access to the host infrastructure to compromise Oracle VM VirtualBox. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data accessible by Oracle VM VirtualBox. The vulnerability has a CVSS 3.1 base score of 6.0, indicating a medium severity with integrity impact. Oracle has included this vulnerability in its June 2026 Critical Security Patch Update advisory but has not explicitly stated the availability of a patch for this specific version in the provided advisory content. Oracle strongly recommends applying Critical Security Patch Updates promptly to mitigate risks. No known exploits in the wild have been reported at this time.

CVE-2026-35275 is a high-severity vulnerability in Oracle VM VirtualBox version 7.2.8 affecting the Shared Folders component. It allows a low privileged attacker with logon access to the host infrastructure to compromise Oracle VM VirtualBox. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data accessible by Oracle VM VirtualBox, impacting confidentiality and integrity. The vulnerability has a CVSS 3.1 base score of 7.5. Oracle has included this vulnerability in its June 2026 Critical Security Patch Update, strongly recommending patch application to mitigate risk.