Vulnerability in Oracle VM VirtualBox Affects Oracle Virtualization
CVE-2026-87322

8.4HIGH

Key Information:

Vendor

Oracle
Status
Oracle Vm Virtualbox
Vendor
CVE Published:
20 October 2026

What is CVE-2026-87322?

A vulnerability exists within Oracle VM VirtualBox that may allow an attacker with high privileges to exploit the system if they gain access to the physical communication segment that the VirtualBox is operating on. This flaw primarily affects Oracle VM VirtualBox version 7.2.20 and could lead to unauthorized control over the virtualization environment. Successful exploitation may compromise confidentiality, integrity, and availability of the affected systems, thus posing a significant risk to users relying on Oracle's virtualization product.

Affected Version(s)

Oracle VM VirtualBox 7.2.20

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.