Oracle VM VirtualBox CVE-2026-46873

Exploitation requires the VMSVGA graphics controller to be the active display adapter for the targeted guest VM (it is the VirtualBox default for modern guests, so most deployments qualify), local logon to the system running VirtualBox 7.2.8, and high privileges on that system per the CVSS PR:H metric - in VM-escape vulnerabilities this typically means root/Administrator inside a guest rather than on the host. Exploitation is further limited by AC:H, indicating the attacker must win a race, satisfy specific memory/state preconditions, or perform a multi-step interaction with the VMSVGA FIFO before the flaw triggers, and the bug is confined to the exact 7.2.8 build. No user interaction on the host side is required (UI:N).

The CVSS 3.1 vector AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H tells a nuanced story: the attacker must already have local logon and high privileges on the system where VirtualBox executes, and the attack is hard to engineer, but if it succeeds it crosses a trust boundary (S:C) and yields full CIA compromise of the host or adjacent products - the textbook VM-escape profile. EPSS data was not provided, the bug is not on the CISA KEV list, and no POC is referenced, so real-world exploitation pressure today is low. However, the PR:H requirement is somewhat ambiguous: in VM-escape contexts 'high privileged' often means root/administrator inside the guest VM rather than on the host, which would make the bug far more useful to attackers who already own a guest - defenders should verify with Oracle whether PR:H refers to host or guest privileges, since that single clarification changes prioritization dramatically. The Oracle tag 'Information Disclosure' conflicts with the description's 'takeover' language and full C/I/A impact, so the tag should not be relied on.

An attacker who has already obtained administrative privileges inside a guest VM - for example via a phished developer workstation hosting a sandbox VM, or by abusing a multi-tenant lab host - issues a crafted sequence of VMSVGA FIFO/3D commands from the guest to trigger the flaw in the host's emulator code. Because the bug is scope-changing, successful exploitation lets the attacker break out of the guest and execute code or otherwise compromise the host VirtualBox process and adjacent products. No public exploit identified at time of analysis, and the CVSS AC:H rating indicates a non-trivial exploit primitive that would need to be developed.