CVE-2025-30725
First published: Tue Apr 15 2025(Updated: )
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.1.6. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data and unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:H).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle VirtualBox | ||
| Oracle VirtualBox | =7.1.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-30725?
CVE-2025-30725 is considered a difficult to exploit vulnerability that allows high privileged attackers access to Oracle VM VirtualBox.
How do I fix CVE-2025-30725?
To fix CVE-2025-30725, upgrade Oracle VM VirtualBox to version 7.1.7 or later.
Who is affected by CVE-2025-30725?
CVE-2025-30725 affects users running Oracle VM VirtualBox version 7.1.6.
What component does CVE-2025-30725 impact?
CVE-2025-30725 impacts the Core component of Oracle VM VirtualBox.
Can CVE-2025-30725 allow unauthorized access?
CVE-2025-30725 could be exploited by a high privileged attacker to compromise the Oracle VM VirtualBox infrastructure.
- agent/references
- agent/type
- agent/first-publish-date
- agent/severity
- agent/source
- agent/author
- agent/description
- agent/guess-ai
- agent/software-canonical-lookup
- agent/weakness
- agent/event
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/remedy
- agent/softwarecombine
- agent/tags
- vendor/oracle
- canonical/oracle virtualbox
- version/oracle virtualbox/7.1.6