Oracle VM VirtualBox Vulnerability Allows High Privileged Attackers to Takeover
CVE-2024-21141
Summary
A vulnerability exists in Oracle VM VirtualBox, where high-privileged attackers with authentication may exploit the system to compromise its functionality. This flaw resides within the core component of Oracle VM VirtualBox, impacting not only the virtualization software itself but potentially spreading its effects to other connected products. The exploitation of this vulnerability leads to unauthorized access and control over Oracle VM VirtualBox instances, exposing critical data and system integrity. The vulnerability requires authenticated access, making it crucial for organizations utilizing Oracle VM VirtualBox to implement recommended security measures to mitigate risks associated with this flaw.
Affected Version(s)
VM VirtualBox * < 7.0.20
References
CVSS V3.1
Timeline
Vulnerability published