Known vulnerabilities in Oracle VM VirtualBox
Vendor:
Oracle
Software:
Oracle VM VirtualBox
Software CPE:
cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*
Website:
https://www.oracle.com
Total vulnerabilities:
273
Public exploits:
5
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
7.2.16
7.2.14
7.2.12
7.2.10
7.2.8
7.2.0
7.1.16
7.2.6
7.2.4
7.1.14
7.1.10
7.2.2
7.1.12
7.1.8
7.0.24
7.0.23
7.1.6
7.0.22
7.0.21
7.1.4
7.1.2
7.1.0
7.0.20
7.0.18
7.0.16
7.0.14
6.1.50
6.1.48
7.0.12
7.0.10
6.1.46
6.1.44
6.1.43
7.0.8
6.1.42
7.0.6
7.0.4
7.0.2
7.0.0
6.1.40
6.1.38
6.1.36
6.1.34
6.1.32
6.1.30
6.1.28
6.1.26
6.1.24
6.1.22
6.1.20
6.1.18
6.1.16
6.1.14
6.1.12
6.1.10
6.1.8
6.1.6
6.1.4
6.1.2
6.1.0
6.0.20
6.0.18
6.0.16
6.0.14
6.0.12
6.0.10
6.0.8
6.0.6
6.0.4
6.0.2
6.0.0
5.2.40
5.2.38
5.2.36
5.2.34
5.2.32
5.2.30
5.2.28
5.2.26
5.2.24
5.2.22
5.1.38
5.1.28
5.1.26
5.1.24
5.1.22
5.1.20
5.1.18
5.1.16
5.1.14
5.1.12
5.1.10
5.1.8
5.1.6
5.1.4
5.1.0
5.0.40
5.0.38
5.0.36
5.0.34
5.0.32
5.0.30
5.0.28
5.0.26
5.0.22
5.0.10
5.0.6
5.0.4
5.0.2
5.0
4.3.40
4.3.38
4.3.34
4.3.30
4.3.28
4.3.26
4.3.24
4.3.22
4.3.20
4.3.18
4.3.16
4.3.14
4.3.12
4.3.10
4.3.8
4.3.6
4.3.4
4.3.2
4.3.0
4.2.36
4.2.32
4.2.30
4.2.28
4.2.26
4.2.24
4.2.22
4.2.20
4.2.18
4.2.16
4.2.14
4.2.12
4.2.10
4.2.8
4.2.6
4.2.4
4.2.2
4.2.0
4.1.44
4.1.40
4.1.38
4.1.36
4.1.34
4.1.32
4.1.30
4.1.28
4.1.26
4.1.24
4.1.22
4.1.20
4.1.18
4.1.16
4.1.14
4.1.12
4.1.10
4.1.8
4.1.6
4.1.4
4.1.2
4.1.0
4.0.36
4.0.32
4.0.30
4.0.28
4.0.24
4.0.22
4.0.20
4.0.18
4.0.16
4.0.14
4.0.12
4.0.10
4.0.8
4.0.6
4.0.4
4.0.2
4.0.0
5.2.20
5.2.18
5.2.16
5.2.14
5.2.12
5.1.30
5.1.32
5.1.34
5.1.36
5.2.10
5.2.0
5.2.2
5.2.4
5.2.6
5.2.8
5.1.2
5.1.3
5.1.7
5.0.27
5.0.20
5.0.24
5.0.18
5.0.12
4.2.34
4.0.34
5.0.8
4.3.32
4.1.42
4.2.29
4.1.37
4.3.25
4.0.29
4.3.31
4.2.33
4.1.41
4.0.33
5.0.7
5.0.16
4.3.35
5.0.13
4.3.36
5.0.14
4.2.31
4.3.29
4.0.31
4.1.39
4.0.26
5.0.25
Vulnerabilities (273)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU149701 - Improper input validation CVE-2026-46974 |
CWE-20 | Low | 7.2.10 | 14.09.2026 |
SB2026091489 |
||
| #VU149702 - Improper input validation CVE-2026-35275 |
CWE-20 | Low | 7.2.10 | 14.09.2026 |
SB2026091489 |
||
| #VU149703 - Improper input validation CVE-2026-46873 |
CWE-20 | Low | 7.2.10 | 14.09.2026 |
SB2026091489 |
||
| #VU149704 - Improper input validation CVE-2026-46768 |
CWE-20 | Low | 7.2.10 | 14.09.2026 |
SB2026091489 |
||
| #VU149705 - Improper input validation CVE-2026-46825 |
CWE-20 | Low | 7.2.10 | 14.09.2026 |
SB2026091489 |
||
| #VU149706 - Improper input validation CVE-2026-46877 |
CWE-20 | Low | 7.2.10 | 14.09.2026 |
SB2026091489 |
||
| #VU149707 - Improper input validation CVE-2026-46874 |
CWE-20 | Low | 7.2.10 | 14.09.2026 |
SB2026091489 |
||
| #VU149708 - Improper input validation CVE-2026-46815 |
CWE-20 | Low | 7.2.10 | 14.09.2026 |
SB2026091489 |
||
| #VU149709 - Improper input validation CVE-2026-46816 |
CWE-20 | Low | 7.2.10 | 14.09.2026 |
SB2026091489 |
||
| #VU149710 - Improper input validation CVE-2026-46977 |
CWE-20 | Low | 7.2.10 | 14.09.2026 |
SB2026091489 |
||
| #VU126811 - Out-of-bounds read CVE-2026-35242 |
CWE-125 | Low | - | 22.04.2026 |
SB20260422152 |
||
| #VU126812 - Out-of-bounds read CVE-2026-35246 |
CWE-125 | Low | - | 22.04.2026 |
SB20260422152 |
||
| #VU126813 - Out-of-bounds read CVE-2026-35251 |
CWE-125 | Low | - | 22.04.2026 |
SB20260422152 |
||
| #VU126814 - Out-of-bounds read CVE-2026-35230 |
CWE-125 | Low | - | 22.04.2026 |
SB20260422152 |
||
| #VU126815 - Out-of-bounds read CVE-2026-35245 |
CWE-125 | Medium | - | 22.04.2026 |
SB20260422152 |
||
| #VU126816 - Out-of-bounds read CVE-2026-35247 |
CWE-125 | Low | - | 22.04.2026 |
SB20260422152 |
||
| #VU126817 - Out-of-bounds read CVE-2026-35248 |
CWE-125 | Low | - | 22.04.2026 |
SB20260422152 |
||
| #VU126818 - Out-of-bounds read CVE-2026-35249 |
CWE-125 | Low | - | 22.04.2026 |
SB20260422152 |
||
| #VU126819 - Out-of-bounds read CVE-2026-35250 |
CWE-125 | Low | - | 22.04.2026 |
SB20260422152 |
||
| #VU121772 - Out-of-bounds read CVE-2026-21981 |
CWE-125 | Low | - | 20.01.2026 |
SB20260120194 |
Showing elements 1 - 20 out of 273