SB20251022147 - Multiple vulnerabilities in Oracle VM VirtualBox

Security Bulletin ID SB20251022147

Severity

Low

Patch available

YES

Number of vulnerabilities 9

Exploitation vector Local access

Highest impact Code execution

Breakdown by Severity

Low
Medium
High
Critical

Description

This security bulletin contains information about 9 secuirty vulnerabilities.

1) Improper input validation (CVE-ID: CVE-2025-62592)

The vulnerability allows a local privileged user to gain access to sensitive information.

The vulnerability exists due to improper input validation within the Core component in Oracle VM VirtualBox. A local privileged user can exploit this vulnerability to gain access to sensitive information.

2) Improper input validation (CVE-ID: CVE-2025-62591)

The vulnerability allows a local privileged user to gain access to sensitive information.

The vulnerability exists due to improper input validation within the Core component in Oracle VM VirtualBox. A local privileged user can exploit this vulnerability to gain access to sensitive information.

3) Improper input validation (CVE-ID: CVE-2025-61759)

The vulnerability allows a local authenticated user to gain access to sensitive information.

The vulnerability exists due to improper input validation within the Core component in Oracle VM VirtualBox. A local authenticated user can exploit this vulnerability to gain access to sensitive information.

4) Improper input validation (CVE-ID: CVE-2025-61760)

The vulnerability allows a local authenticated user to execute arbitrary code.

The vulnerability exists due to improper input validation within the Core component in Oracle VM VirtualBox. A local authenticated user can exploit this vulnerability to execute arbitrary code.

5) Improper input validation (CVE-ID: CVE-2025-62590)