Vulnerability in Oracle VM VirtualBox Core Component
CVE-2026-71140

3.4LOW

Key Information:

Vendor

Oracle
Status
Oracle Vm Virtualbox
Vendor
CVE Published:
18 August 2026

What is CVE-2026-71140?

A security vulnerability exists in the Oracle VM VirtualBox product that affects version 7.2.14. This flaw allows an attacker with high privileges, already logged into the infrastructure where Oracle VM VirtualBox operates, to compromise the software. Successful exploitation may enable unauthorized update, insert, or delete access to certain data within Oracle VM VirtualBox, alongside the potential for unauthorized reading of a segment of accessible data.

Affected Version(s)

Oracle VM VirtualBox 7.2.14

References

https://www.oracle.com/security-alerts/cspuaug2026.html
vendor-advisory

CVSS V3.1

Score:
3.4
Severity:
LOW
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.