Threats Tagged 'cve-2026-46873'

CVE-2026-46873 is a high-severity vulnerability in Oracle VM VirtualBox version 7.2.8 affecting the VMSVGA device component. It requires a high privileged attacker with logon access to the infrastructure running Oracle VM VirtualBox. Successful exploitation can lead to full takeover of Oracle VM VirtualBox and may impact additional products. Oracle has released a Critical Security Patch Update advisory recommending prompt patching and mitigation. Patch status for this specific version is not yet confirmed. Oracle advises applying the June 2026 Critical Security Patch Update and reducing risk by limiting privileges and blocking required network protocols until patches are applied.

CVE-2026-35275 is a high-severity vulnerability in Oracle VM VirtualBox version 7.2.8 affecting the Shared Folders component. It allows a low privileged attacker with logon access to the host infrastructure to compromise Oracle VM VirtualBox. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data accessible by Oracle VM VirtualBox, impacting confidentiality and integrity. The vulnerability has a CVSS 3.1 base score of 7.5. Oracle has included this vulnerability in its June 2026 Critical Security Patch Update, strongly recommending patch application to mitigate risk.