Oracle VM VirtualBox vulnerabilities | LiveThreat CVE Feed

Product

Oracle VM VirtualBox

by Oracle Corporation · last CVE Sep 15, 2026

On CISA KEVExploited in the wildRansomware-linked

481

CVEs

On KEV

10.0

Max CVSS

New 30D

Vulnerabilities481 In the news11 Timeline

Severity mix

Critical 4High 220Medium 176Low 40

Severity

All severities481 Critical4 High220 Medium176 Low40

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Oracle VM VirtualBox to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2017-10407	7.3	0%	Oct 19	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: through 5.1.28
CVE-2017-10392	7.3	0%	Oct 19	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: 5.1.28
CVE-2017-10242	7.3	0%	Aug 8	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: through 5.1.22
CVE-2017-10241	7.3	0%	Aug 8	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: through 5.1.22
CVE-2017-10240	7.3	0%	Aug 8	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: through 5.1.22
CVE-2017-10239	7.3	0%	Aug 8	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: through 5.1.22
CVE-2017-10238	7.3	0%	Aug 8	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: through 5.1.22
CVE-2017-10237	7.3	0%	Aug 8	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: through 5.1.22
CVE-2017-10236	7.3	0%	Aug 8	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: through 5.1.22
CVE-2017-10233	7.3	0%	Aug 8	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: through 5.1.22
CVE-2017-10210	7.3	0%	Aug 8	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: through 5.1.22
CVE-2026-21986	7.1	0%	Jan 20	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.1.14; 7.2.4
CVE-2021-2287	7.1	0%	Apr 22	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.20
CVE-2021-2286	7.1	0%	Apr 22	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.20
CVE-2021-2285	7.1	0%	Apr 22	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.20
CVE-2021-2284	7.1	0%	Apr 22	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.20
CVE-2021-2283	7.1	0%	Apr 22	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.20
CVE-2021-2282	7.1	0%	Apr 22	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.20
CVE-2021-2281	7.1	0%	Apr 22	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.20
CVE-2021-2280	7.1	0%	Apr 22	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.20
CVE-2018-3055	7.1	1%	Jul 18	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: before 5.2.16
CVE-2021-2454	7.0	0%	Jul 21	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.24
CVE-2020-2914	7.0	0%	Apr 15	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.0.20; 6.1.0 before 6.1.6
CVE-2020-2913	7.0	0%	Apr 15	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.0.20; 6.1.0 before 6.1.6
CVE-2016-5610	6.8	0%	Oct 25	Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect confidentiality,… Affected: 5.0.0 before 5.0.28; 5.1.0 before 5.1.8
CVE-2025-30725	6.7	0%	Apr 15	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.1.6
CVE-2024-21107	6.7	0%	Apr 16	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 7.0.16
CVE-2022-21465	6.7	0%	Apr 19	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 6.1.0 before 6.1.34
CVE-2021-35545	6.7	0%	Oct 20	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.28
CVE-2017-10235	6.7	1%	Aug 8	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: through 5.1.22
CVE-2016-5538	6.7	0%	Oct 25	Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect confidentiality,… Affected: 5.0.27; 5.1.7
CVE-2016-0678	6.7	0%	Apr 21	Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.18 allows local users to affect confidentiality, integrity, and… Affected: 5.0.18
CVE-2018-2845	6.6	0%	Apr 19	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: 5.1.0 before 5.1.36; 5.2.0 before 5.2.10
CVE-2025-61759	6.5	0%	Oct 21	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.1.12; 7.2.2
CVE-2024-21121	6.5	0%	Apr 16	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 7.0.16
CVE-2024-21106	6.5	0%	Apr 16	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 7.0.16
CVE-2022-21471	6.5	0%	Apr 19	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.34
CVE-2022-21394	6.5	1%	Jan 19	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.32
CVE-2021-2128	6.5	1%	Jan 20	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.18
CVE-2020-14711	6.5	0%	Jul 15	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 5.2.44; 6.0.0 before 6.0.24; 6.1.0 before 6.1.12
CVE-2020-2951	6.5	0%	Apr 15	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 5.2.40; 6.0.0 before 6.0.20; 6.1.0 before 6.1.6
CVE-2020-2910	6.5	0%	Apr 15	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.0.20; 6.1.0 before 6.1.6
CVE-2020-2725	6.5	0%	Jan 15	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 5.2.0 before 5.2.36; 6.0.0 before 6.0.16; 6.1.0 before 6.1.2
CVE-2020-2705	6.5	0%	Jan 15	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 5.2.0 before 5.2.36; 6.0.0 before 6.0.16; 6.1.0 before 6.1.2
CVE-2020-2704	6.5	0%	Jan 15	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 5.2.0 before 5.2.36; 6.0.0 before 6.0.16; 6.1.0 before 6.1.2
CVE-2020-2703	6.5	0%	Jan 15	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 5.2.0 before 5.2.36; 6.0.0 before 6.0.16
CVE-2020-2692	6.5	0%	Jan 15	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 5.2.0 before 5.2.36; 6.0.0 before 6.0.16; 6.1.0 before 6.1.2
CVE-2020-2691	6.5	0%	Jan 15	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 5.2.0 before 5.2.36; 6.0.0 before 6.0.16; 6.1.0 before 6.1.2
CVE-2020-2690	6.5	1%	Jan 15	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 5.2.0 before 5.2.36; 6.0.0 before 6.0.16; 6.1.0 before 6.1.2
CVE-2020-2689	6.5	0%	Jan 15	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 5.2.0 before 5.2.36; 6.0.0 before 6.0.16; 6.1.0 before 6.1.2