Vulnerability in Oracle VM VirtualBox Could Allow Low-Privileged Attackers to Compromise the Product
CVE-2023-21987

7.8HIGH

Key Information:

Vendor

Oracle
Status
Vm Virtualbox
Vendor
CVE Published:
18 April 2023

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2023-21987?

A vulnerability exists in Oracle VM VirtualBox that enables a low-privileged attacker, with access to the environment where it operates, to compromise the software. The exploitability of this vulnerability can lead to a full takeover of Oracle VM VirtualBox, potentially affecting additional products within the ecosystem. This vulnerability is present in all versions prior to 6.1.44 and 7.0.8, emphasizing the need for prompt updates to maintain system integrity and security.

Affected Version(s)

VM VirtualBox * < 6.1.44

VM VirtualBox * < 7.0.8

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

cve-2023-21987-poc
Created by chunzhennn

References

https://www.oracle.com/security-alerts/cpuapr2023.html
vendor-advisory

EPSS Score

9% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.