Threats tagged 'ghsa-6pm8-v5r3-7hwx'

CVE-2026-87276 is a vulnerability in the Oracle VM VirtualBox Core component affecting multiple specific versions including 7.2.16. It allows a low privileged attacker with logon access to the host to potentially take over Oracle VM VirtualBox, requiring user interaction from a third party. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 7.5. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update and recommends timely patching.