Oracle VM VirtualBox Core Vulnerability Allowing Unauthorized Access

CVE-2026-71138

What is CVE-2026-71138?

A vulnerability in Oracle VM VirtualBox allows a high-privileged attacker with logon access to compromise the system. This flaw can lead to unauthorized access that may facilitate a denial of service attack, allowing the attacker to cause repeatable crashes or hangs of the virtualization service. Additionally, it may permit modifications to accessible data and unauthorized read access to a subset of that data, thereby impacting the confidentiality, integrity, and availability of data within the platform. The risk extends beyond VirtualBox, possibly affecting other Oracle products integrated with it.

References