Unauthorized Access Vulnerability in Oracle VM VirtualBox by Oracle

CVE-2025-21571

What is CVE-2025-21571?

Oracle VM VirtualBox is susceptible to a vulnerability that enables a high-privileged user with logon access to the infrastructure to compromise the application. Attackers can potentially create, delete, or modify critical data, while also gaining unauthorized read access to a subset of data. This vulnerability may lead to partial denial of service, impacting various functionalities. Users of affected versions prior to 7.0.24 and 7.1.6 should implement necessary updates to mitigate the risks associated with this vulnerability.

References