CVE-2026-21955

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)

High ยท published January 20, 2026

CVSS v3.1
8.2
EPSS
0%
Percentile
22.3
In the wild
Unconfirmed
What it is

โšก A high-privileged attacker can take full control of Oracle VM VirtualBox with this easily exploitable vulnerability โ€” yikes! ๐Ÿ˜ฑ Think of Oracle VM VirtualBox as a high-tech airport. If an attacker manages to sneak through security with a valid ticket, they could access the cockpit and control the entire flight path, putting all passengers at risk. ๐Ÿ›ซ If successfully exploited, this vulnerability could lead to complete takeover of Oracle VM VirtualBox, allowing the attacker to manipulate virtual machines, access sensitive data, and disrupt operations. The potential fallout might ripple through any dependent products, creating chaos across your infrastructure! ๐Ÿ”ฅ

Put simply

Think of Oracle VM VirtualBox as a high-tech airport. If an attacker manages to sneak through security with a valid ticket, they could access the cockpit and control the entire flight path, putting all passengers at risk. ๐Ÿ›ซ This vulnerability affects Oracle VM VirtualBox versions 7.1.14 and 7.2.4, allowing an attacker with a privileged logon to compromise the virtualization environment. A failure to properly restrict access results in unauthorized control over the virtual machines.

What to do

If successfully exploited, this vulnerability could lead to complete takeover of Oracle VM VirtualBox, allowing the attacker to manipulate virtual machines, access sensitive data, and disrupt operations. The potential fallout might ripple through any dependent products, creating chaos across your infrastructure! ๐Ÿ”ฅ Immediately update Oracle VM VirtualBox to the latest version to eliminate this vulnerability. Ensure that access controls are tightly managed and audit logins to detect any unusual activity. Don't delay, this needs your attention now! ๐Ÿ”’ You can handle this! With the right updates and precautions, you'll have your system secure in no time! ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS v3.1
8.2 ยท HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00307 ยท 22.3th percentile
Published
2026-01-20T21:56Z
EPSS history
Timeline
  • 20 JAN 21:56Z
    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)
    cvelistv5