Known vulnerabilities in Oracle VM VirtualBox - page 14

Vendor: Oracle
Software CPE: cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*
Total vulnerabilities: 273
Public exploits: 5
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle VM VirtualBox Oracle VM VirtualBox is affected by 273 known vulnerabilities: 9 high, 10 medium, 254 low Critical High Medium Low

Vulnerabilities (273)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU11903 - Permissions, Privileges, and Access Controls
CVE-2018-2860
CWE-264 Low
No
No
- 18.04.2018 SB2018041811
SB2018042402
SB2018052307
#VU11902 - Permissions, Privileges, and Access Controls
CVE-2018-2845
CWE-264 Low
No
No
- 18.04.2018 SB2018041811
SB2018042402
SB2018052307
#VU818 - Resource exhaustion
CVE-2016-6308
CWE-400 Low
No
No
- 10.10.2016 SB2016092613
SB2023030219
SB2018110640
and 2 more
#VU817 - Resource exhaustion
CVE-2016-6307
CWE-400 Low
No
No
- 10.10.2016 SB2016092612
SB2016092236
SB2023030219
and 3 more
#VU661 - Use After Free
CVE-2016-6309
CWE-416 High
No
No
- 26.09.2016 SB2016092602
SB2023030219
#VU660 - NULL Pointer Dereference
CVE-2016-7052
CWE-476 Medium
No
No
- 26.09.2016 SB2016092602
SB2016092803
SB2016092705
and 8 more
#VU642 - Buffer over-read
CVE-2016-2176
CWE-126 Low
No
No
- 23.09.2016 SB2016050507
SB2016091934
SB2016050404
and 2 more
#VU641 - Improper input validation
CVE-2016-2109
CWE-119 Low
No
No
- 23.09.2016 SB2016050506
SB2016051903
SB2016051204
and 17 more
#VU640 - Improper input validation
CVE-2016-2105
CWE-20 Low
No
No
- 23.09.2016 SB2016050505
SB2016061413
SB2016051903
and 22 more
#VU639 - Improper Access Control
CVE-2016-2107
CWE-284 High
Available
No
- 23.09.2016 SB2016050504
SB2016061413
SB2016050514
and 19 more
#VU177 - Exposure of sensitive information to an unauthorized actor
CVE-2016-3612
CWE-200 Medium
No
No
- 20.07.2016 SB2016072013
#VU176 - Permissions, Privileges, and Access Controls
CVE-2016-3597
CWE-264 Medium
No
No
- 20.07.2016 SB2016072012
#VU24 - Download of Code Without Integrity Check
CVE-2016-2177
CWE-119 Medium
No
No
- 24.06.2016 SB2016081301
SB2017013102
SB2018021614
and 19 more


Showing elements 261 - 280 out of 273