VM Virtualbox vulnerabilities | LiveThreat CVE Feed

Product

VM Virtualbox

by Oracle · last CVE Sep 15, 2026

On CISA KEVExploited in the wildRansomware-linked

481

CVEs

On KEV

10.0

Max CVSS

New 30D

Vulnerabilities481 In the news11 Timeline

Severity mix

Critical 4High 220Medium 176Low 40

Severity

All severities481 Critical4 High220 Medium176 Low40

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add VM Virtualbox to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2018-5407	4.7	3%	Nov 15	Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention' Affected: before 6.0.0
CVE-2026-87275	4.6	0%	Sep 15	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.16
CVE-2026-21981	4.6	0%	Jan 20	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.1.14; 7.2.4
CVE-2023-22001	4.6	0%	Apr 18	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.44; 7.0.0 before 7.0.8
CVE-2023-22000	4.6	0%	Apr 18	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.44; 7.0.0 before 7.0.8
CVE-2023-21998	4.6	0%	Apr 18	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.44; 7.0.0 before 7.0.8
CVE-2021-2125	4.6	0%	Jan 20	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.18
CVE-2017-10187	4.6	0%	Aug 8	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: through 5.1.22
CVE-2026-87274	4.4	0%	Sep 15	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.16
CVE-2026-71139	4.4	0%	Aug 18	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.14
CVE-2023-21884	4.4	0%	Jan 18	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.42; 7.0.0 before 7.0.6
CVE-2022-21627	4.4	0%	Oct 18	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.40
CVE-2022-21554	4.4	0%	Jul 19	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.36
CVE-2021-35542	4.4	0%	Oct 20	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.28
CVE-2021-2475	4.4	0%	Oct 20	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.28
CVE-2021-2312	4.4	0%	Apr 22	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.20
CVE-2021-2130	4.4	0%	Jan 20	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.18
CVE-2021-2127	4.4	0%	Jan 20	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.18
CVE-2021-2073	4.4	0%	Jan 20	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.18
CVE-2020-14715	4.4	0%	Jul 15	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 5.2.44; 6.0.0 before 6.0.24; 6.1.0 before 6.1.12
CVE-2020-14714	4.4	0%	Jul 15	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 5.2.44; 6.0.0 before 6.0.24; 6.1.0 before 6.1.12
CVE-2016-5613	4.3	0%	Oct 25	Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect availability via vectors… Affected: 5.0.0 before 5.0.28; 5.1.0 before 5.1.8
CVE-2016-5611	4.3	0%	Oct 25	Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect confidentiality via… Affected: 5.0.0 before 5.0.28; 5.1.0 before 5.1.8
CVE-2026-87280	4.2	0%	Sep 15	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.16
CVE-2023-22016	4.2	0%	Jul 18	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 6.0.0 before 6.1.46; 7.0.0 before 7.0.10
CVE-2018-3005	4.0	0%	Jul 18	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: before 5.2.16