Vulnerability in Oracle VM VirtualBox by Oracle
CVE-2026-87303

5.9MEDIUM

Key Information:

Vendor

Oracle

Vendor
CVE Published:
20 October 2026

What is CVE-2026-87303?

An exploitable vulnerability exists in Oracle VM VirtualBox that could allow a low-privileged attacker to compromise the application. This requires an individual to interact with the affected system, which introduces unique conditions for exploitation. The outcome of successful exploitation may cause the application to hang or crash repeatedly, resulting in a denial of service that can affect other interconnected products within the virtualized environment. It is critical for users to apply appropriate security measures and updates to mitigate the risks associated with this vulnerability.

Affected Version(s)

Oracle VM VirtualBox 7.2.16

References

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.