Vulnerability in Oracle VM VirtualBox Component of Oracle Virtualization
CVE-2026-87275

4.6MEDIUM

Key Information:

Vendor

Oracle
Status
Oracle Vm Virtualbox
Vendor
CVE Published:
15 September 2026

What is CVE-2026-87275?

A security vulnerability exists in Oracle VM VirtualBox that allows a high-privileged attacker with access to the infrastructure where Oracle VM VirtualBox operates to compromise the virtualization platform. This vulnerability primarily impacts version 7.2.16 and can lead to unauthorized read access to sensitive data stored in Oracle VM VirtualBox, as well as potentially causing a partial denial of service. Exploiting this vulnerability could have broader implications for associated systems. Users are urged to review the security advisory for mitigation steps.

Affected Version(s)

Oracle VM VirtualBox 7.2.16

References

https://www.oracle.com/security-alerts/cspusep2026.html
vendor-advisory

CVSS V3.1

Score:
4.6
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.