Exploit for #VU82174 Improper input validation in Oracle VM VirtualBox

Vulnerability identifier: #VU82174

Vulnerability risk: Low

CVSSv4.0: 4.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:H/E:P/U:Clear]

CVE-ID: CVE-2023-22098

CWE-ID: CWE-20

Exploitation vector: Local

Exploits in database: 1

• October 22, 2024
  • CVE-2023-22098 (Oracle VM VirtualBox 7.0.10 r158379 Escape) [Github]

Vulnerable software:
Oracle VM VirtualBox
Server applications / Virtualization software

Vendor: Oracle