Vulnerability in Oracle VM VirtualBox for Windows Hosts by Oracle
CVE-2026-47054

7.8HIGH

Key Information:

Vendor

Oracle
Status
Oracle Vm Virtualbox
Vendor
CVE Published:
21 July 2026

What is CVE-2026-47054?

Oracle VM VirtualBox, a virtualization product by Oracle, contains a vulnerability that allows attackers with limited privileges on Windows hosts to exploit the system. This vulnerability could enable an attacker to compromise the VirtualBox instance, leading to unauthorized system access and operational disruptions. Affected users should take immediate action to mitigate risks by updating to the latest version and monitoring their systems for any unusual activity.

Affected Version(s)

Oracle VM VirtualBox 7.2.12

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.