VV
Product
VM Virtualbox
On CISA KEVExploited in the wildRansomware-linked
481
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 4High 220Medium 176Low 40
Watch
Add VM Virtualbox to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-2894 | 6.0 | Apr 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 5.2.40; 6.0.0 before 6.0.20; 6.1.0 before 6.1.6 |
| CVE-2020-2743 | 6.0 | Apr 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 5.2.36; 6.0.0 before 6.0.16; 6.1.0 before 6.1.2 |
| CVE-2020-2741 | 6.0 | Apr 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 5.2.40; 6.0.0 before 6.0.20; 6.1.0 before 6.1.6 |
| CVE-2020-2727 | 6.0 | Jan 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 5.2.0 before 5.2.36; 6.0.0 before 6.0.16; 6.1.0 before 6.1.2 |
| CVE-2019-3031 | 6.0 | Oct 16 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 5.2.0 before 5.2.34; 6.0.0 before 6.0.14 |
| CVE-2019-3005 | 6.0 | Oct 16 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 5.2.0 before 5.2.34; 6.0.0 before 6.0.14 |
| CVE-2019-3002 | 6.0 | Oct 16 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 5.2.0 before 5.2.34; 6.0.0 before 6.0.14 |
| CVE-2019-2984 | 6.0 | Oct 16 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 5.2.0 before 5.2.34; 6.0.0 before 6.0.14 |
| CVE-2024-21109 | 5.9 | Apr 16 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 7.0.16 |
| CVE-2018-0735 | 5.9 | Oct 29 | Timing attack against ECDSA signature generation Affected: before 6.0.0; 5.0.0 before 5.2.24 |
| CVE-2016-3612 | 5.9 | Jul 21 | Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.22 allows remote attackers to affect confidentiality via vectors… Affected: through 5.0.20 |
| CVE-2015-3197 | 5.9 | Feb 15 | ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers, which makes it easier for man-in-the-middle attackers to defeat… Affected: 5.0.16 |
| CVE-2026-71134 | 5.7 | Aug 18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.14 |
| CVE-2026-71151 | 5.6 | Aug 18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.14 |
| CVE-2026-47053 | 5.6 | Jul 21 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.12 |
| CVE-2019-2525 | 5.6 | Jan 16 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: before 5.2.24; 6.0.0 |
| CVE-2026-47062 | 5.5 | Jul 21 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.12 |
| CVE-2026-47044 | 5.5 | Jul 21 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.12 |
| CVE-2025-21533 | 5.5 | Jan 21 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.0.0 before 7.0.24; 7.1.0 before 7.1.6 |
| CVE-2024-21161 | 5.5 | Jul 16 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 7.0.20 |
| CVE-2023-22017 | 5.5 | Jul 18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 6.0.0 before 6.1.46; 7.0.0 before 7.0.10 |
| CVE-2023-21899 | 5.5 | Jan 18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.42; 7.0.0 before 7.0.6 |
| CVE-2023-21898 | 5.5 | Jan 18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.42; 7.0.0 before 7.0.6 |
| CVE-2021-35540 | 5.5 | Oct 20 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.28 |
| CVE-2020-14892 | 5.5 | Oct 21 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.16 |
| CVE-2019-2877 | 5.5 | Jul 23 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: before 5.2.32; 6.0.0 before 6.0.10 |
| CVE-2019-2446 | 5.5 | Jan 16 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: before 5.2.24; 6.0.0 |
| CVE-2019-2448 | 5.5 | Jan 16 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: before 5.2.24; 6.0.0 |
| CVE-2016-5608 | 5.5 | Oct 25 | Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect availability via vectors… Affected: 5.0.0 before 5.0.28; 5.1.0 before 5.1.8 |
| CVE-2016-3597 | 5.5 | Jul 21 | Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.26 allows local users to affect availability via vectors related to… Affected: through 5.0.24 |
| CVE-2026-87267 | 5.3 | Sep 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.16 |
| CVE-2026-71132 | 5.3 | Aug 18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.14 |
| CVE-2024-21248 | 5.3 | Oct 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.0.0 through 7.0.22; 7.1.0 through 7.1.2 |
| CVE-2021-2297 | 5.3 | Apr 22 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.20 |
| CVE-2021-2296 | 5.3 | Apr 22 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.20 |
| CVE-2020-14700 | 5.3 | Jul 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 5.2.44; 6.0.0 before 6.0.24; 6.1.0 before 6.1.12 |
| CVE-2020-14698 | 5.3 | Jul 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 5.2.44; 6.0.0 before 6.0.24; 6.1.0 before 6.1.12 |
| CVE-2020-14695 | 5.3 | Jul 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 5.2.44; 6.0.0 before 6.0.24; 6.1.0 before 6.1.12 |
| CVE-2020-14694 | 5.3 | Jul 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 5.2.44; 6.0.0 before 6.0.24; 6.1.0 before 6.1.12 |
| CVE-2020-14673 | 5.3 | Jul 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 5.2.44; 6.0.0 before 6.0.24; 6.1.0 before 6.1.12 |
| CVE-2020-14650 | 5.3 | Jul 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 5.2.44; 6.0.0 before 6.0.24; 6.1.0 before 6.1.12 |
| CVE-2020-14648 | 5.3 | Jul 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 5.2.44; 6.0.0 before 6.0.24; 6.1.0 before 6.1.12 |
| CVE-2020-2693 | 5.3 | Jan 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 5.2.0 before 5.2.36; 6.0.0 before 6.0.16; 6.1.0 before 6.1.2 |
| CVE-2015-3195 | 5.3 | Dec 6 | The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors… Affected: before 4.3.36; 5.0.0 before 5.0.14 |
| CVE-2017-10209 | 5.2 | Aug 8 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: through 5.1.22 |
| CVE-2026-35248 | 5.0 | Apr 21 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.6 |
| CVE-2020-14712 | 5.0 | Jul 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 5.2.44; 6.0.0 before 6.0.24; 6.1.0 before 6.1.12 |
| CVE-2020-14707 | 5.0 | Jul 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 5.2.44; 6.0.0 before 6.0.24; 6.1.0 before 6.1.12 |
| CVE-2017-10428 | 5.0 | Oct 19 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: through 5.1.28 |
| CVE-2021-2291 | 4.7 | Apr 22 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.20 |