Core Vulnerability in Oracle VM VirtualBox Affects Oracle Virtualization
CVE-2026-47050

7.4HIGH

Key Information:

Vendor

Oracle
Status
Oracle Vm Virtualbox
Vendor
CVE Published:
21 July 2026

What is CVE-2026-47050?

A vulnerability in Oracle's Virtualization product, specifically Oracle VM VirtualBox, allows high-privileged attackers with access to the environment to compromise the software. This vulnerability can lead to unauthorized manipulation of critical data and increased risk of service disruptions, including potential crashes. Successful exploitation of this vulnerability requires human interaction, making it crucial for organizations to ensure robust security measures are in place. The issue primarily affects version 7.2.8 but may have broader implications for any products reliant on Oracle VM VirtualBox. For more details, refer to the official Oracle Advisory.

Affected Version(s)

Oracle VM VirtualBox 7.2.8

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.