High Privilege Vulnerability in Oracle VM VirtualBox by Oracle
CVE-2025-53024

8.2HIGH

Key Information:

Vendor

Oracle
Status
Oracle Vm Virtualbox
Vendor
CVE Published:
15 July 2025

What is CVE-2025-53024?

A vulnerability exists in Oracle VM VirtualBox that allows an attacker with high privileges to exploit the system after logging into the infrastructure where VirtualBox is executed. This flaw can lead to a complete takeover of Oracle VM VirtualBox, posing a significant risk to the virtualization environment. While the immediate impact is on Oracle VM VirtualBox, the potential repercussions could extend to other interconnected products, highlighting the importance of securing this critical component in your virtual ecosystem.

Affected Version(s)

Oracle VM VirtualBox 7.1.10

References

https://www.oracle.com/security-alerts/cpujul2025.html
vendor-advisory

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-53024 : High Privilege Vulnerability in Oracle VM VirtualBox by Oracle