Threats Tagged 'cve-2026-71151'

A vulnerability exists in Oracle VM VirtualBox version 7.2.14 that allows a low privileged attacker with logon access to the host infrastructure to potentially compromise Oracle VM VirtualBox. The vulnerability impacts confidentiality, enabling unauthorized access to critical or all accessible data within Oracle VM VirtualBox. The CVSS 3.1 base score is 5.6, indicating a medium severity. Exploitation requires local access with high attack complexity and no user interaction. No known exploits are reported in the wild. Oracle has issued a Critical Security Patch Update recommending timely patching, but no specific patch details for this version are provided in the advisory.

CVE-2026-71151 is a vulnerability in Oracle VM VirtualBox version 7.2.14 that allows a low privileged attacker with logon access to the host infrastructure to compromise the VirtualBox environment. The vulnerability is difficult to exploit and can lead to unauthorized access to critical data or complete access to all data accessible by Oracle VM VirtualBox. The vulnerability has a CVSS 3.1 base score of 5.6, indicating a medium severity level. The vulnerability impacts confidentiality but does not affect integrity or availability. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update, which contains numerous security fixes across multiple products.