CVE-2025-53026
BaseFortify
Publication date: 2025-07-15
Last updated on: 2025-07-16
Assigner: Oracle
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| oracle | vm_virtualbox | 7.1.10 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-269 | The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in Oracle VM VirtualBox version 7.1.10, specifically in its core component. It allows a highly privileged attacker who already has access to the infrastructure where Oracle VM VirtualBox runs to exploit the system. The exploitation can lead to unauthorized access to critical data or full access to all data accessible by Oracle VM VirtualBox. The vulnerability has a CVSS base score of 6.0, indicating a moderate severity with significant confidentiality impact.
How can this vulnerability impact me? :
If exploited, this vulnerability can allow an attacker with high privileges on the host infrastructure to gain unauthorized access to sensitive or critical data managed by Oracle VM VirtualBox. This could lead to data breaches or compromise of the virtualized environment's confidentiality, potentially affecting other products due to the scope change.