Vulnerability in Oracle VM VirtualBox Affects Oracle Virtualization
CVE-2026-60158

6.4MEDIUM

Key Information:

Vendor

Oracle
Status
Oracle Vm Virtualbox
Vendor
CVE Published:
21 July 2026

What is CVE-2026-60158?

A vulnerability in Oracle VM VirtualBox allows a low-privileged attacker with access to the infrastructure to compromise the product. This could lead to unauthorized actions, such as creating, deleting, or modifying critical data within the virtualization environment. Additionally, the vulnerability has the potential to cause a partial denial of service, affecting the availability of Oracle VM VirtualBox services. Overall, while it primarily impacts Oracle VM VirtualBox, the effects may extend to other connected products within the virtualization ecosystem.

Affected Version(s)

Oracle VM VirtualBox 7.2.12

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
6.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.