CVE-2026-87280: Medium severity Oracle Oracle VM VirtualBox vulnerability
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 4.2 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H).
Affected Software
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
The issue is locally exploitable by an attacker who already has high privileges and can log on to the infrastructure where Oracle VM VirtualBox runs. It affects the supported Oracle VM VirtualBox 7.2.16 release.
What must an attacker do to exploit it?
The attacker needs local access, high privileges, and human interaction from someone other than the attacker. The available information does not identify the specific interaction required.
What is the expected impact of a successful attack?
A successful attack can cause Oracle VM VirtualBox to hang or crash repeatedly, resulting in a complete denial of service. No confidentiality or integrity impact is identified.