Privileged Access Vulnerability in Oracle VM VirtualBox by Oracle
CVE-2026-71114

6MEDIUM

Key Information:

Vendor

Oracle
Status
Oracle Vm Virtualbox
Vendor
CVE Published:
18 August 2026

What is CVE-2026-71114?

A vulnerability exists in Oracle VM VirtualBox that could allow an attacker with high privileges accessing the infrastructure to compromise the system. Although the issue lies within Oracle VM VirtualBox, it may have broader implications affecting other associated products. Exploitation of this vulnerability could lead to unauthorized access to sensitive data, potentially granting complete visibility or control over all data accessible via Oracle VM VirtualBox.

Affected Version(s)

Oracle VM VirtualBox 7.2.14

References

https://www.oracle.com/security-alerts/cspuaug2026.html
vendor-advisory

CVSS V3.1

Score:
6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.