Oracle VM VirtualBox CVE-2026-35275

Attacker needs an authenticated local logon to the host running Oracle VM VirtualBox 7.2.8 (CVSS PR:L, AV:L), and the targeted VM/host must have the Shared Folders feature configured - this is the named vulnerable component and is not enabled by default for new VMs unless the operator explicitly adds a shared folder mapping. Exploitation is rated High complexity by Oracle (AC:H), implying race conditions, specific filesystem layouts, or non-trivial preconditions beyond the attacker's direct control. No user interaction is required (UI:N), and the bug is limited to VirtualBox 7.2.8 on supported host OSes; hosts running 7.1.x or earlier, or 7.2.8 hosts with zero Shared Folders mappings on any running VM, are not reachable via this vector.

The CVSS 3.1 vector AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N signals a meaningful but constrained risk: the attacker must already have a local logon (PR:L) to the system running VirtualBox, exploitation is non-trivial (AC:H), and there is no availability impact. The scope change (S:C) is what drives the 7.5 score, reflecting that a successful attack reaches assets outside the vulnerable component - most plausibly the host's filesystem via Shared Folders - which materially elevates real impact above a normal local issue. There is no CISA KEV listing, no EPSS published in the provided data, and no public exploit identified, so this is currently a patch-on-schedule priority rather than an emergency, with the caveat that Oracle's CPU advisories are commonly reverse-engineered into PoCs within weeks. Note Oracle's description says 'logon to the infrastructure where VirtualBox executes' which aligns with AV:L; defenders should not interpret AV:L as requiring console access - RDP/SSH sessions or any interactive shell on the host or, plausibly, a guest VM both qualify.

A low-privileged user with an interactive session on a workstation or server running VirtualBox 7.2.8 - for example, a developer's laptop or a shared lab host - targets a VM that has Shared Folders configured and abuses the Shared Folders protocol to read or modify host files outside the intended shared directory, crossing the trust boundary into the host scope. The same primitive could plausibly be reachable from inside a guest VM where the attacker has compromised the guest, turning a guest foothold into host data tampering. No public exploit is identified at time of analysis, so an attacker would need to develop one from the advisory.