Core Vulnerability in Oracle VM VirtualBox by Oracle
CVE-2026-60160

3.2LOW

Key Information:

Vendor

Oracle
Status
Oracle Vm Virtualbox
Vendor
CVE Published:
21 July 2026

What is CVE-2026-60160?

A vulnerability exists in Oracle VM VirtualBox that allows a privileged attacker, already logged onto the system, to gain unauthorized read access to specific data within the application. This exploitation could extend its impact beyond Oracle VM VirtualBox, potentially compromising additional connected products. The vulnerability is present in version 7.2.12, necessitating immediate attention from users to mitigate any risks associated with data confidentiality.

Affected Version(s)

Oracle VM VirtualBox 7.2.12

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
3.2
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.