VV
Product
VM Virtualbox
On CISA KEVExploited in the wildRansomware-linked
481
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 4High 220Medium 176Low 40
Watch
Add VM Virtualbox to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-21988 | 3.8 | Apr 18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.44; 7.0.0 before 7.0.8 |
| CVE-2023-21889 | 3.8 | Jan 18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.42; 7.0.0 before 7.0.6 |
| CVE-2023-21885 | 3.8 | Jan 18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.42; 7.0.0 before 7.0.6 |
| CVE-2022-21488 | 3.8 | Apr 19 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.34 |
| CVE-2022-21487 | 3.8 | Apr 19 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.34 |
| CVE-2022-21295 | 3.8 | Jan 19 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.32 |
| CVE-2019-2505 | 3.8 | Jan 16 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: before 5.2.24; 6.0.0 |
| CVE-2019-2506 | 3.8 | Jan 16 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: before 5.2.24; 6.0.0 |
| CVE-2019-2553 | 3.8 | Jan 16 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: before 5.2.24; 6.0.0 |
| CVE-2019-2501 | 3.8 | Jan 16 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: before 5.2.24; 6.0.0 |
| CVE-2019-2504 | 3.8 | Jan 16 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: before 5.2.24; 6.0.0 |
| CVE-2018-2831 | 3.8 | Apr 19 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: 5.1.0 before 5.1.36; 5.2.0 before 5.2.10 |
| CVE-2023-21999 | 3.6 | Apr 18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.44; 7.0.0 before 7.0.8 |
| CVE-2026-71140 | 3.4 | Aug 18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.14 |
| CVE-2024-21108 | 3.3 | Apr 16 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 7.0.16 |
| CVE-2019-2876 | 3.3 | Jul 23 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: before 5.2.32; 6.0.0 before 6.0.10 |
| CVE-2019-2875 | 3.3 | Jul 23 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: before 5.2.32; 6.0.0 before 6.0.10 |
| CVE-2019-2874 | 3.3 | Jul 23 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: before 5.2.32; 6.0.0 before 6.0.10 |
| CVE-2019-2873 | 3.3 | Jul 23 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: before 5.2.32; 6.0.0 before 6.0.10 |
| CVE-2026-87284 | 3.2 | Sep 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.16 |
| CVE-2026-87281 | 3.2 | Sep 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.16 |
| CVE-2026-60160 | 3.2 | Jul 21 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.12 |
| CVE-2026-47055 | 3.2 | Jul 21 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.12 |
| CVE-2026-47043 | 3.2 | Jul 21 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.12 |
| CVE-2026-46977 | 3.2 | Jun 16 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device) Affected: 7.2.8 |
| CVE-2026-46874 | 3.2 | Jun 16 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.8 |
| CVE-2026-46816 | 3.2 | Jun 16 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device) Affected: 7.2.8 |
| CVE-2026-46815 | 3.2 | Jun 16 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device) Affected: 7.2.8 |
| CVE-2026-35249 | 3.2 | Apr 21 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.6 |
| CVE-2023-21991 | 3.2 | Apr 18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.44; 7.0.0 before 7.0.8 |
| CVE-2021-2123 | 3.2 | Jan 20 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.18 |
| CVE-2020-2748 | 3.2 | Apr 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 5.2.40; 6.0.0 before 6.0.20; 6.1.0 before 6.1.6 |
| CVE-2020-2909 | 2.8 | Apr 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 5.2.40; 6.0.0 before 6.0.20; 6.1.0 before 6.1.6 |
| CVE-2019-2850 | 2.8 | Jul 23 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: 5.0.0 before 5.2.32; 6.0.0 before 6.0.10 |
| CVE-2024-21164 | 2.5 | Jul 16 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 7.0.20 |
| CVE-2017-3513 | 2.5 | Apr 24 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: 5.0.0 through 5.0.36; 5.1.0 through 5.1.18 |
| CVE-2026-35250 | 2.3 | Apr 21 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.6 |
| CVE-2025-53029 | 2.3 | Jul 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.1.10 |
| CVE-2024-21253 | 2.3 | Oct 15 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.0.0 through 7.0.22 |
| CVE-2019-2926 | 2.3 | Oct 16 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 5.2.0 before 5.2.34; 6.0.0 before 6.0.14 |
| CVE-2016-0602 | – | Jan 21 | Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.14 allows local users to affect confidentiality, integrity, and… Affected: through 5.0.12 |
| CVE-2016-0592 | – | Jan 21 | Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.36 and before 5.0.14 allows local users to affect availability via… Affected: 4.0.0 before 4.3.36; 5.0.0 before 5.0.14 |
| CVE-2016-0495 | – | Jan 21 | Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.36 and 5.0.14 allows remote attackers to affect availability via… Affected: 4.0.0 before 4.3.36; 5.0.0 before 5.0.14 |
| CVE-2015-3196 | – | Dec 6 | ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-threaded client, writes the PSK identity hint to an incorrect… Affected: 4.3.0 through 4.3.35; 5.0.0 through 5.0.13 |
| CVE-2015-5307 | – | Nov 16 | The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #AC… Affected: 4.0.0 through 4.0.34; 4.1.0 through 4.1.42; 4.2.0 through 4.2.34; 4.3.0 through 4.3.29; 5.0.0 through 5.0.8 |
| CVE-2015-4896 | – | Oct 21 | Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.0.34, 4.1.42, 4.2.34, 4.3.32, and 5.0.8, when a VM has the Remote… Affected: 4.0.0 before 4.0.34; 4.1.0 before 4.1.42; 4.2.0 before 4.2.34; 4.3.0 before 4.3.32; 5.0.0 before 5.0.8 |
| CVE-2015-4856 | – | Oct 21 | Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.0.30, 4.1.38, 4.2.30, 4.3.26, and 5.0.0 allows local users to affect… Affected: 4.0.29; 4.1.37; 4.2.29; 4.3.25 |
| CVE-2015-4813 | – | Oct 21 | Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4.0.34, 4.1.42, 4.2.34, 4.3.32, and 5.0.8, when using a Windows guest,… Affected: 4.0.0 before 4.0.34; 4.1.0 before 4.1.42; 4.2.0 before 4.2.34; 4.3.0 before 4.3.32; 5.0.0 before 5.0.8 |
| CVE-2015-2594 | – | Jul 16 | Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4.0.32, 4.1.40, 4.2.32, and 4.3.30 allows local users to affect… Affected: 4.0.0 before 4.0.32; 4.1.0 before 4.1.40; 4.2.0 before 4.2.32; 4.3.0 before 4.3.30 |
| CVE-2015-0235 | – | Jan 28 | Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary… Affected: before 5.1.24 |