VM Virtualbox vulnerabilities | LiveThreat CVE Feed

Product

VM Virtualbox

by Oracle · last CVE Sep 15, 2026

On CISA KEVExploited in the wildRansomware-linked

481

CVEs

On KEV

10.0

Max CVSS

New 30D

Vulnerabilities481 In the news11 Timeline

Severity mix

Critical 4High 220Medium 176Low 40

Severity

All severities481 Critical4 High220 Medium176 Low40

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add VM Virtualbox to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-21988	3.8	0%	Apr 18	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.44; 7.0.0 before 7.0.8
CVE-2023-21889	3.8	0%	Jan 18	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.42; 7.0.0 before 7.0.6
CVE-2023-21885	3.8	0%	Jan 18	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.42; 7.0.0 before 7.0.6
CVE-2022-21488	3.8	0%	Apr 19	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.34
CVE-2022-21487	3.8	0%	Apr 19	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.34
CVE-2022-21295	3.8	0%	Jan 19	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.32
CVE-2019-2505	3.8	0%	Jan 16	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: before 5.2.24; 6.0.0
CVE-2019-2506	3.8	1%	Jan 16	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: before 5.2.24; 6.0.0
CVE-2019-2553	3.8	0%	Jan 16	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: before 5.2.24; 6.0.0
CVE-2019-2501	3.8	0%	Jan 16	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: before 5.2.24; 6.0.0
CVE-2019-2504	3.8	0%	Jan 16	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: before 5.2.24; 6.0.0
CVE-2018-2831	3.8	0%	Apr 19	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: 5.1.0 before 5.1.36; 5.2.0 before 5.2.10
CVE-2023-21999	3.6	0%	Apr 18	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.44; 7.0.0 before 7.0.8
CVE-2026-71140	3.4	0%	Aug 18	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.14
CVE-2024-21108	3.3	0%	Apr 16	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 7.0.16
CVE-2019-2876	3.3	0%	Jul 23	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: before 5.2.32; 6.0.0 before 6.0.10
CVE-2019-2875	3.3	0%	Jul 23	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: before 5.2.32; 6.0.0 before 6.0.10
CVE-2019-2874	3.3	0%	Jul 23	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: before 5.2.32; 6.0.0 before 6.0.10
CVE-2019-2873	3.3	0%	Jul 23	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: before 5.2.32; 6.0.0 before 6.0.10
CVE-2026-87284	3.2	0%	Sep 15	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.16
CVE-2026-87281	3.2	0%	Sep 15	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.16
CVE-2026-60160	3.2	0%	Jul 21	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.12
CVE-2026-47055	3.2	0%	Jul 21	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.12
CVE-2026-47043	3.2	0%	Jul 21	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.12
CVE-2026-46977	3.2	0%	Jun 16	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device) Affected: 7.2.8
CVE-2026-46874	3.2	0%	Jun 16	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.8
CVE-2026-46816	3.2	0%	Jun 16	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device) Affected: 7.2.8
CVE-2026-46815	3.2	0%	Jun 16	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device) Affected: 7.2.8
CVE-2026-35249	3.2	0%	Apr 21	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.6
CVE-2023-21991	3.2	0%	Apr 18	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.44; 7.0.0 before 7.0.8
CVE-2021-2123	3.2	1%	Jan 20	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 6.1.18
CVE-2020-2748	3.2	1%	Apr 15	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 5.2.40; 6.0.0 before 6.0.20; 6.1.0 before 6.1.6
CVE-2020-2909	2.8	1%	Apr 15	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 5.2.40; 6.0.0 before 6.0.20; 6.1.0 before 6.1.6
CVE-2019-2850	2.8	0%	Jul 23	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: 5.0.0 before 5.2.32; 6.0.0 before 6.0.10
CVE-2024-21164	2.5	0%	Jul 16	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: before 7.0.20
CVE-2017-3513	2.5	0%	Apr 24	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: 5.0.0 through 5.0.36; 5.1.0 through 5.1.18
CVE-2026-35250	2.3	0%	Apr 21	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.2.6
CVE-2025-53029	2.3	0%	Jul 15	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.1.10
CVE-2024-21253	2.3	0%	Oct 15	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 7.0.0 through 7.0.22
CVE-2019-2926	2.3	1%	Oct 16	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core) Affected: 5.2.0 before 5.2.34; 6.0.0 before 6.0.14