Core Vulnerability in Oracle VM VirtualBox by Oracle
CVE-2026-46974

7.5HIGH

Key Information:

Vendor

Oracle
Status
Oracle Vm Virtualbox
Vendor
CVE Published:
16 June 2026

What is CVE-2026-46974?

A significant core vulnerability has been identified within Oracle VM VirtualBox, specifically impacting version 7.2.8. This vulnerability can be exploited by high-privileged attackers who have logged onto the infrastructure where Oracle VM VirtualBox runs. Successful exploitation could lead to a complete compromise of the virtualization software, potentially impacting other products as well due to the scope of the attack. Organizations using Oracle VM VirtualBox should take immediate action to assess their environments and apply necessary security measures.

Affected Version(s)

Oracle VM VirtualBox 7.2.8

References

https://www.oracle.com/security-alerts/cspujun2026.html
vendor-advisory

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.