Oracle VM VirtualBox Core Component Privilege Escalation Vulnerability

Vulnerability

A vulnerability has been identified in the Oracle VM VirtualBox product, specifically in the core component, affecting versions 7.1.14 and 7.2.4. This vulnerability allows a high-privileged attacker with access to the infrastructure where Oracle VM VirtualBox is running to compromise the application. Although the vulnerability resides within Oracle VM VirtualBox, successful exploitation could significantly impact other products, leading to a scope change. Exploitation of this vulnerability could result in the complete takeover of Oracle VM VirtualBox.

Impact

Exploitation of this vulnerability allows for the complete takeover of Oracle VM VirtualBox. However, due to the scope change mentioned, successful exploitation could also impact additional products.

Added: Jan 20, 2026, 10:58 PM
Updated: Jan 20, 2026, 10:58 PM

Vulnerability Rating

Custom Algorithm
spread
7.8
impact
7.5
exploitability
2.8
remediation
0.0
relevance
2.2
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.