Vulnerability in Oracle VM VirtualBox Core Component Affects Oracle's Virtualization Solutions
CVE-2026-47047

7.8HIGH

Key Information:

Vendor

Oracle
Status
Oracle Vm Virtualbox
Vendor
CVE Published:
21 July 2026

What is CVE-2026-47047?

An exploitable vulnerability exists in the Core component of Oracle VM VirtualBox, affecting version 7.2.12. This flaw allows authenticated attackers with low privileges to manipulate the execution environment of Oracle VM VirtualBox, potentially leading to unauthorized control of the system. Such breaches could compromise the confidentiality, integrity, and availability of the affected virtualization setup, posing significant risks to organizational infrastructure.

Affected Version(s)

Oracle VM VirtualBox 7.2.12

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.