Threats Tagged 'cve-2026-71134'

A vulnerability exists in Oracle VM VirtualBox version 7.2.14 that allows a high privileged attacker with local access to compromise the product. The flaw can lead to unauthorized read, update, insert, or delete access to data accessible by Oracle VM VirtualBox and may cause a partial denial of service. The vulnerability has a CVSS 3.1 base score of 5.7, indicating medium severity. No official patch or fix information is provided in the vendor advisory. The vulnerability affects multiple specific older versions of VirtualBox, including many Ubuntu package versions.

CVE-2026-71134 is a vulnerability in Oracle VM VirtualBox version 7.2.14 that allows a high privileged attacker with local access to the infrastructure to compromise the product. Exploitation can lead to unauthorized read, update, insert, or delete access to some data accessible by Oracle VM VirtualBox, as well as partial denial of service. The vulnerability has a CVSS 3.1 base score of 5.7, indicating medium severity. The attack scope includes potential impact on additional products beyond Oracle VM VirtualBox. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update advisory but has not explicitly stated patch availability for this specific version in the provided data.