Vulnerability in Oracle VM VirtualBox by Oracle Virtualization
CVE-2026-87283

6MEDIUM

Key Information:

Vendor

Oracle
Status
Oracle Vm Virtualbox
Vendor
CVE Published:
15 September 2026

What is CVE-2026-87283?

A security vulnerability exists within Oracle VM VirtualBox that allows a high-privileged attacker with access to the system to exploit the software, potentially leading to a Denial of Service (DoS) condition. The specific flaw impacts version 7.2.16 and can result in the application hanging or crashing repeatedly. Though the vulnerability primarily affects Oracle VM VirtualBox, its consequences may extend to other connected products. For those managing Oracle VM VirtualBox, understanding this risk is crucial for maintaining system integrity and availability.

Affected Version(s)

Oracle VM VirtualBox 7.2.16

References

https://www.oracle.com/security-alerts/cspusep2026.html
vendor-advisory

CVSS V3.1

Score:
6
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.