Vulnerability in Oracle VM VirtualBox by Oracle Virtualization

CVE-2026-21989

What is CVE-2026-21989?

This vulnerability in Oracle VM VirtualBox allows a high-privileged attacker who has logged into the infrastructure where the software operates to compromise the system. While directly affecting Oracle VM VirtualBox, the implications of this vulnerability can extend to other products in the environment. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, as well as complete access to all accessible data within Oracle VM VirtualBox. Additionally, it has the potential to cause a partial denial of service, impacting the availability of the virtualized environment.

References