CVE-2026-21985
BaseFortify
Publication date: 2026-01-20
Last updated on: 2026-01-29
Assigner: Oracle
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| oracle | vm_virtualbox | 7.1.14 |
| oracle | vm_virtualbox | 7.2.4 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-NVD-CWE-noinfo |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in the Oracle VM VirtualBox product, specifically in versions 7.1.14 and 7.2.4. It allows a highly privileged attacker who already has logon access to the infrastructure running Oracle VM VirtualBox to compromise the VirtualBox environment. The vulnerability can lead to unauthorized access to critical data within Oracle VM VirtualBox and may also affect additional products due to scope change.
How can this vulnerability impact me? :
If exploited, this vulnerability can result in unauthorized access to critical data or complete access to all data accessible by Oracle VM VirtualBox. This means sensitive information could be exposed or compromised, potentially affecting the security and integrity of your virtualized environments.