VV
Product
VM Virtualbox
by Oracle · last CVE Sep 15, 2026
On CISA KEVExploited in the wildRansomware-linked
481
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 4High 220Medium 176Low 40
Watch

Add VM Virtualbox to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-2725
RansomwareIn wildKEV
9.8
100%
Apr 26
Oracle WebLogic Server, Injection
Affected: before 5.2.36; 6.0.0 before 6.0.16; 6.1.0 before 6.1.2; 5.2.36
CVE-2015-8104
10.0
2%
Nov 16
The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB…
Affected: 4.0.0 through 4.0.34; 4.1.0 through 4.1.42; 4.2.0 through 4.2.34; 4.3.0 through 4.3.35; 5.0.0 through 5.0.13
CVE-2016-5605
9.1
2%
Oct 25
Unspecified vulnerability in the Oracle VM VirtualBox component before 5.1.4 in Oracle Virtualization allows remote attackers to affect confidentiality and integrity via vectors…
Affected: through 5.1.2
CVE-2018-3294
9.0
3%
Oct 17
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core)
Affected: before 5.2.20
Showing 4