Privilege Escalation Vulnerability in Oracle VirtualBox by Oracle
CVE-2026-47043

3.2LOW

Key Information:

Vendor

Oracle
Status
Oracle Vm Virtualbox
Vendor
CVE Published:
21 July 2026

What is CVE-2026-47043?

An exploitable vulnerability exists in Oracle VM VirtualBox that allows an attacker with elevated privileges and access to the infrastructure where VirtualBox operates to exploit the vulnerability. This can lead to unauthorized read access to sensitive data within Oracle VM VirtualBox. The scope of the impact may extend to other products due to the interconnected nature of virtualization environments. Ensuring timely updates and security practices is crucial to mitigating potential risks associated with this vulnerability.

Affected Version(s)

Oracle VM VirtualBox 7.2.12

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
3.2
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.