Known vulnerabilities in Oracle VM VirtualBox - page 3
Vendor:
Oracle
Software:
Oracle VM VirtualBox
Software CPE:
cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*
Website:
https://www.oracle.com
Total vulnerabilities:
263
Public exploits:
5
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
7.2.0
7.1.16
7.2.6
7.2.4
7.1.14
7.1.10
7.2.2
7.1.12
7.1.8
7.0.24
7.0.23
7.1.6
7.0.22
7.0.21
7.1.4
7.1.2
7.1.0
7.0.20
7.0.18
7.0.16
7.0.14
6.1.50
6.1.48
7.0.12
7.0.10
6.1.46
6.1.44
6.1.43
7.0.8
6.1.42
7.0.6
7.0.4
7.0.2
7.0.0
6.1.40
6.1.38
6.1.36
6.1.34
6.1.32
6.1.30
6.1.28
6.1.26
6.1.24
6.1.22
6.1.20
6.1.18
6.1.16
6.1.14
6.1.12
6.1.10
6.1.8
6.1.6
6.1.4
6.1.2
6.1.0
6.0.20
6.0.18
6.0.16
6.0.14
6.0.12
6.0.10
6.0.8
6.0.6
6.0.4
6.0.2
6.0.0
5.2.40
5.2.38
5.2.36
5.2.34
5.2.32
5.2.30
5.2.28
5.2.26
5.2.24
5.2.22
5.1.38
5.1.28
5.1.26
5.1.24
5.1.22
5.1.20
5.1.18
5.1.16
5.1.14
5.1.12
5.1.10
5.1.8
5.1.6
5.1.4
5.1.0
5.0.40
5.0.38
5.0.36
5.0.34
5.0.32
5.0.30
5.0.28
5.0.26
5.0.22
5.0.10
5.0.6
5.0.4
5.0.2
5.0
4.3.40
4.3.38
4.3.34
4.3.30
4.3.28
4.3.26
4.3.24
4.3.22
4.3.20
4.3.18
4.3.16
4.3.14
4.3.12
4.3.10
4.3.8
4.3.6
4.3.4
4.3.2
4.3.0
4.2.36
4.2.32
4.2.30
4.2.28
4.2.26
4.2.24
4.2.22
4.2.20
4.2.18
4.2.16
4.2.14
4.2.12
4.2.10
4.2.8
4.2.6
4.2.4
4.2.2
4.2.0
4.1.44
4.1.40
4.1.38
4.1.36
4.1.34
4.1.32
4.1.30
4.1.28
4.1.26
4.1.24
4.1.22
4.1.20
4.1.18
4.1.16
4.1.14
4.1.12
4.1.10
4.1.8
4.1.6
4.1.4
4.1.2
4.1.0
4.0.36
4.0.32
4.0.30
4.0.28
4.0.24
4.0.22
4.0.20
4.0.18
4.0.16
4.0.14
4.0.12
4.0.10
4.0.8
4.0.6
4.0.4
4.0.2
4.0.0
5.2.20
5.2.18
5.2.16
5.2.14
5.2.12
5.1.30
5.1.32
5.1.34
5.1.36
5.2.10
5.2.0
5.2.2
5.2.4
5.2.6
5.2.8
5.1.2
5.1.3
5.1.7
5.0.27
5.0.20
5.0.24
5.0.18
5.0.12
4.2.34
4.0.34
5.0.8
4.3.32
4.1.42
4.2.29
4.1.37
4.3.25
4.0.29
4.3.31
4.2.33
4.1.41
4.0.33
5.0.7
5.0.16
4.3.35
5.0.13
4.3.36
5.0.14
4.2.31
4.3.29
4.0.31
4.1.39
4.0.26
5.0.25
Vulnerabilities (263)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU107577 - Improper input validation CVE-2025-30712 |
CWE-20 | Low | - | 17.04.2025 |
SB2025041725 |
||
| #VU107578 - Improper input validation CVE-2025-30725 |
CWE-20 | Low | - | 17.04.2025 |
SB2025041725 |
||
| #VU103219 - Improper input validation CVE-2025-21571 |
CWE-20 | Low | 7.0.24, 7.1.6 | 22.01.2025 |
SB2025012210 |
||
| #VU103220 - Improper input validation CVE-2025-21533 |
CWE-20 | Low | 7.0.24, 7.1.6 | 22.01.2025 |
SB2025012210 |
||
| #VU98685 - Heap-based Buffer Overflow CVE-2024-21259 |
CWE-122 | Low | 7.0.22, 7.1.2 | 15.10.2024 |
SB20241015194 |
||
| #VU98686 - Improper input validation CVE-2024-21263 |
CWE-20 | Low | 7.0.22, 7.1.2 | 15.10.2024 |
SB20241015194 |
||
| #VU98687 - Missing release of memory after effective lifetime CVE-2024-21273 |
CWE-401 | Low | 7.0.22, 7.1.2 | 15.10.2024 |
SB20241015194 |
||
| #VU98688 - Improper Authorization CVE-2024-21248 |
CWE-285 | Low | 7.0.22, 7.1.2 | 15.10.2024 |
SB20241015194 |
||
| #VU98689 - Improper input validation CVE-2024-21253 |
CWE-20 | Low | 7.0.22 | 15.10.2024 |
SB20241015194 |
||
| #VU94594 - Improper input validation CVE-2024-21141 |
CWE-20 | Low | 7.0.20 | 18.07.2024 |
SB20240718184 |
||
| #VU94595 - Improper input validation CVE-2024-21161 |
CWE-20 | Low | 7.0.20 | 18.07.2024 |
SB20240718184 |
||
| #VU94596 - Improper input validation CVE-2024-21164 |
CWE-20 | Low | 7.0.20 | 18.07.2024 |
SB20240718184 |
||
| #VU88717 - Improper input validation CVE-2024-21111 |
CWE-20 | Low | 7.0.16 | 17.04.2024 |
SB2024041782 |
||
| #VU88718 - Improper Privilege Management CVE-2024-21116 |
CWE-269 | Low | 7.0.16 | 17.04.2024 |
SB2024041782 |
||
| #VU88719 - Improper Access Control CVE-2024-21110 |
CWE-284 | Low | 7.0.16 | 17.04.2024 |
SB2024041782 |
||
| #VU88720 - Improper input validation CVE-2024-21107 |
CWE-20 | Low | 7.0.16 | 17.04.2024 |
SB2024041782 |
||
| #VU88721 - Improper input validation CVE-2024-21106 |
CWE-20 | Low | 7.0.16 | 17.04.2024 |
SB2024041782 |
||
| #VU88722 - Use After Free CVE-2024-21121 |
CWE-416 | Low | 7.0.16 | 17.04.2024 |
SB2024041782 |
||
| #VU88723 - Exposure of resource to wrong sphere CVE-2024-21109 |
CWE-668 | Medium | 7.0.16 | 17.04.2024 |
SB2024041782 |
||
| #VU88724 - Improper input validation CVE-2024-21108 |
CWE-20 | Low | 7.0.16 | 17.04.2024 |
SB2024041782 |
Showing elements 41 - 60 out of 263