Vulnerability in Oracle VM VirtualBox by Oracle

CVE-2023-22100

Summary

A vulnerability exists in Oracle VM VirtualBox prior to version 7.0.12 that allows a high-privileged attacker, who has access to the virtualization infrastructure, to exploit the weakness. This may lead to unauthorized access to sensitive data or full control over all data accessible by Oracle VM VirtualBox. Additionally, the vulnerability can trigger denial of service, causing frequent crashes or hangs of the Oracle VM VirtualBox service. This susceptibility necessitates prompt updates to mitigate potential risks.

References