CVE-2026-71140
Received Received - Intake

Privilege Escalation in Oracle VM VirtualBox

Publication date: 2026-08-18

Last updated on: 2026-08-18

Assigner: Oracle

Description
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data as well as unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 3.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-18
Last Modified
2026-08-18
Generated
2026-08-19
AI Q&A
2026-08-19
EPSS Evaluated
N/A
NVD
CVE-2026-71140

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
oracle vm_virtualbox 7.2.14

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a vulnerability in Oracle VM VirtualBox version 7.2.14. It allows a high privileged attacker with local access to compromise the virtualization software. The attacker could gain unauthorized access to read or modify some of the data accessible by VirtualBox.

Impact Analysis

If you use Oracle VM VirtualBox 7.2.14, an attacker with local access could read or alter some of your virtual machine's data. This could lead to data leaks or corruption within your virtual environment.

Compliance Impact

This vulnerability could potentially violate compliance requirements like GDPR or HIPAA by allowing unauthorized access to sensitive data stored in virtual machines. Organizations using VirtualBox 7.2.14 may need to update to mitigate risks.

Mitigation Strategies

Apply the latest security patches from Oracle for Oracle VM VirtualBox version 7.2.14 or upgrade to a newer version if available. Limit user privileges to reduce the risk of exploitation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-71140. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart