CVE-2025-53026

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.1.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).
CVSS

No CVSS.

References
Configurations

Configuration 1 (hide)

cpe:2.3:a:oracle:vm_virtualbox:7.1.10:*:*:*:*:*:*:*

History

16 Jul 2025, 19:58

Type Values Removed Values Added
CPE cpe:2.3:a:oracle:vm_virtualbox:7.1.10:*:*:*:*:*:*:*
References () https://www.oracle.com/security-alerts/cpujul2025.html - () https://www.oracle.com/security-alerts/cpujul2025.html - Vendor Advisory
First Time Oracle
Oracle vm Virtualbox

15 Jul 2025, 21:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-07-15 20:15

Updated : 2025-07-16 19:58


NVD link : CVE-2025-53026

Mitre link : CVE-2025-53026


JSON object : View

Products Affected

oracle

  • vm_virtualbox
CWE

No CWE.