Oracle VM VirtualBox Core Vulnerability Allowing Privileged Data Manipulation and Partial Denial-of-Service

A vulnerability exists in Oracle VM VirtualBox in the Core component, affecting versions prior to 7.0.24 and prior to 7.1.6. This vulnerability allows a high-privileged attacker with access to the environment where Oracle VM VirtualBox runs to compromise the application. Exploitation could lead to unauthorized creation, deletion, or modification of critical data, access to a subset of Oracle VM VirtualBox data, and a partial denial-of-service.

Impact

Successful exploitation could result in unauthorized changes to critical data or any data accessible by Oracle VM VirtualBox, unauthorized read access to some Oracle VM VirtualBox data, and a partial denial-of-service condition in Oracle VM VirtualBox.

Remediation

Users are advised to update to Oracle VM VirtualBox versions 7.0.24 or 7.1.6.