Threats Tagged 'cve-2026-46977'

CVE-2026-46977 is a vulnerability in Oracle VM VirtualBox version 7.2.8 affecting the VMSVGA device component. It allows a high privileged attacker with local access to the infrastructure running VirtualBox to compromise the product, potentially impacting additional Oracle products. Successful exploitation can lead to unauthorized read access to some Oracle VM VirtualBox accessible data. The vulnerability has a low CVSS score of 3.2, indicating limited confidentiality impact without integrity or availability effects. No official patch or fix is explicitly stated in the vendor advisory as of the publication date. Oracle strongly recommends applying Critical Security Patch Updates promptly to mitigate risks from vulnerabilities including this one.

CVE-2026-35275 is a high-severity vulnerability in Oracle VM VirtualBox version 7.2.8 affecting the Shared Folders component. It allows a low privileged attacker with logon access to the host infrastructure to compromise Oracle VM VirtualBox. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data accessible by Oracle VM VirtualBox, impacting confidentiality and integrity. The vulnerability has a CVSS 3.1 base score of 7.5. Oracle has included this vulnerability in its June 2026 Critical Security Patch Update, strongly recommending patch application to mitigate risk.