Exploitable Vulnerability in Oracle VM VirtualBox by Oracle

CVE-2025-21533

What is CVE-2025-21533?

An easily exploitable access control vulnerability exists within Oracle VM VirtualBox, allowing a low-privileged attacker with logon to the infrastructure to gain unauthorized access. If exploited, this could lead to a breach of critical data, granting the attacker access to all data accessible within Oracle VM VirtualBox. Affected versions include those earlier than 7.0.24 and 7.1.6, underscoring the importance of updating and maintaining robust security practices.

References