CVE-2025-62588: High severity Oracle VM VirtualBox vulnerability

Published Oct 21, 2025

Updated

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).

Affected Software

3 affected components

Oracle VM VirtualBox

Oracle VM VirtualBox=7.1.12

Oracle VM VirtualBox=7.2.2

Event History

Oct 21, 2025

CVE Published

via MITRE·08:03 PM

Data Sourced

via MITRE·08:03 PM

DescriptionSeverity

Data Sourced

via NVD·08:20 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-62588?

CVE-2025-62588 is considered to have a high severity due to its potential impact on compromised systems.

How do I fix CVE-2025-62588?

To fix CVE-2025-62588, upgrade to the latest patched version of Oracle VM VirtualBox.

What versions are affected by CVE-2025-62588?

CVE-2025-62588 affects Oracle VM VirtualBox versions 7.1.12 and 7.2.2.

Who can exploit CVE-2025-62588?

CVE-2025-62588 can be exploited by a high privileged attacker with access to the infrastructure where Oracle VM VirtualBox operates.

What components of Oracle VM VirtualBox are impacted by CVE-2025-62588?

CVE-2025-62588 impacts the Core component of Oracle VM VirtualBox.