Oracle VM VirtualBox Core Component Privileged Takeover Vulnerability

A vulnerability has been identified in the Oracle VM VirtualBox product, specifically in the Core component. This issue affects Oracle VM VirtualBox versions 7.1.14 and 7.2.4. The vulnerability is easily exploitable and allows a high-privileged attacker with access to the infrastructure where Oracle VM VirtualBox is running to compromise the application. Although the vulnerability resides within Oracle VM VirtualBox, successful exploitation can have significant repercussions on additional products, indicating a scope change. Exploitation of this vulnerability can lead to a complete takeover of Oracle VM VirtualBox.

Impact

Exploitation of this vulnerability allows for a complete takeover of Oracle VM VirtualBox. However, due to the scope change, this exploitation can also significantly impact additional products.