Oracle VM VirtualBox Core Component Privilege Escalation Vulnerability

Vulnerability

A vulnerability has been identified in the Oracle VM VirtualBox product, specifically in the Core component, affecting versions 7.1.12 and 7.2.2. This vulnerability allows a high-privileged attacker with access to the infrastructure where Oracle VM VirtualBox is running to compromise the application. Although the issue resides within Oracle VM VirtualBox, successful exploitation could have significant repercussions on other products, indicating a scope change. The vulnerability could lead to a complete takeover of Oracle VM VirtualBox.

Impact

Exploitation of this vulnerability allows for a complete takeover of Oracle VM VirtualBox. However, due to the scope change, successful attacks could also impact additional products.

Added: Oct 21, 2025, 8:50 PM
Updated: Oct 21, 2025, 10:05 PM

Vulnerability Rating

Custom Algorithm
spread
7.8
impact
0.0
exploitability
2.8
remediation
0.0
relevance
0.8
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.