Vulnerability in Oracle VM VirtualBox Product by Oracle
CVE-2025-53029

2.3LOW

Key Information:

Vendor

Oracle
Status
Oracle Vm Virtualbox
Vendor
CVE Published:
15 July 2025

What is CVE-2025-53029?

An exploitable vulnerability exists in Oracle VM VirtualBox, specifically affecting version 7.1.10. Attackers with high privileges who have logged into the infrastructure where Oracle VM VirtualBox runs can exploit this weakness. Successful exploitation can lead to unauthorized read access to specific data within Oracle VM VirtualBox, potentially compromising sensitive information.

Affected Version(s)

Oracle VM VirtualBox 7.1.10

References

https://www.oracle.com/security-alerts/cpujul2025.html
vendor-advisory

CVSS V3.1

Score:
2.3
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-53029 : Vulnerability in Oracle VM VirtualBox Product by Oracle