Known vulnerabilities in Oracle VM VirtualBox

Vendor: Oracle
Software CPE: cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*
Total vulnerabilities: 263
Public exploits: 5
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle VM VirtualBox Oracle VM VirtualBox is affected by 263 known vulnerabilities: 9 high, 10 medium, 244 low Critical High Medium Low

Vulnerabilities (263)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126811 - Out-of-bounds read
CVE-2026-35242
CWE-125 Low
No
No
- 22.04.2026 SB20260422152
#VU126812 - Out-of-bounds read
CVE-2026-35246
CWE-125 Low
No
No
- 22.04.2026 SB20260422152
#VU126813 - Out-of-bounds read
CVE-2026-35251
CWE-125 Low
No
No
- 22.04.2026 SB20260422152
#VU126814 - Out-of-bounds read
CVE-2026-35230
CWE-125 Low
No
No
- 22.04.2026 SB20260422152
#VU126815 - Out-of-bounds read
CVE-2026-35245
CWE-125 Medium
No
No
- 22.04.2026 SB20260422152
#VU126816 - Out-of-bounds read
CVE-2026-35247
CWE-125 Low
No
No
- 22.04.2026 SB20260422152
#VU126817 - Out-of-bounds read
CVE-2026-35248
CWE-125 Low
No
No
- 22.04.2026 SB20260422152
#VU126818 - Out-of-bounds read
CVE-2026-35249
CWE-125 Low
No
No
- 22.04.2026 SB20260422152
#VU126819 - Out-of-bounds read
CVE-2026-35250
CWE-125 Low
No
No
- 22.04.2026 SB20260422152
#VU121762 - Improper input validation
CVE-2026-21988
CWE-20 Low
No
No
- 20.01.2026 SB20260120194
#VU121763 - Improper input validation
CVE-2026-21990
CWE-20 Low
No
No
- 20.01.2026 SB20260120194
#VU121764 - Improper input validation
CVE-2026-21989
CWE-20 Low
No
No
- 20.01.2026 SB20260120194
#VU121765 - Out-of-bounds write
CVE-2026-21957
CWE-787 Low
No
No
- 20.01.2026 SB20260120194
#VU121766 - Heap-based Buffer Overflow
CVE-2026-21983
CWE-122 Low
No
No
7.1.16, 7.2.6 20.01.2026 SB20260120194
#VU121767 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-21984
CWE-362 Low
No
No
- 20.01.2026 SB20260120194
#VU121768 - Improper input validation
CVE-2026-21982
CWE-20 Medium
No
No
- 20.01.2026 SB20260120194
#VU121769 - Improper input validation
CVE-2026-21986
CWE-20 Low
No
No
- 20.01.2026 SB20260120194
#VU121770 - Out-of-bounds read
CVE-2026-21963
CWE-125 Low
No
No
- 20.01.2026 SB20260120194
#VU121771 - Out-of-bounds read
CVE-2026-21985
CWE-125 Low
No
No
- 20.01.2026 SB20260120194
#VU121772 - Out-of-bounds read
CVE-2026-21981
CWE-125 Low
No
No
- 20.01.2026 SB20260120194


Showing elements 1 - 20 out of 263