Vulnerability in Oracle VM VirtualBox Affecting Oracle Virtualization
CVE-2026-71135

6MEDIUM

Key Information:

Vendor

Oracle
Status
Oracle Vm Virtualbox
Vendor
CVE Published:
18 August 2026

What is CVE-2026-71135?

An easily exploitable vulnerability in Oracle VM VirtualBox allows a high privileged attacker with logon access to the underlying infrastructure to compromise the application. While the vulnerability primarily resides in Oracle VM VirtualBox, its implications can extend to other products, leading to significant disruptions. Successful exploitation can result in repeated crashes or hangs, causing a Denial of Service condition within the application.

Affected Version(s)

Oracle VM VirtualBox 7.2.14

References

https://www.oracle.com/security-alerts/cspuaug2026.html
vendor-advisory

CVSS V3.1

Score:
6
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.