Privileged Access Vulnerability in Oracle VM VirtualBox by Oracle
CVE-2025-53028

8.2HIGH

Key Information:

Vendor

Oracle
Status
Oracle Vm Virtualbox
Vendor
CVE Published:
15 July 2025

What is CVE-2025-53028?

A vulnerability exists in Oracle VM VirtualBox, allowing an attacker with high privileges who is logged into the server executing Oracle VM VirtualBox to compromise its functionality. This issue exposes the affected VirtualBox component to potential exploitation, which could lead to unauthorized control and manipulation of the virtualization environment. The vulnerability poses a significant risk as it could affect other linked systems and infrastructure, warranting immediate attention and remediation. Organizations using the vulnerable version are strongly advised to apply the necessary security updates provided by Oracle.

Affected Version(s)

Oracle VM VirtualBox 7.1.10

References

https://www.oracle.com/security-alerts/cpujul2025.html
vendor-advisory

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-53028 : Privileged Access Vulnerability in Oracle VM VirtualBox by Oracle