EUVD-2026-79931
GHSA-j4cj-hh2c-v9px
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Requires a local low-privileged logon session on the VirtualBox host, so AV:L and PR:L; low complexity and no user interaction; availability dominant, integrity minor, no confidentiality impact.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
2DescriptionNVD
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H).
AnalysisAI
A locally exploitable flaw in the Core component of Oracle VM VirtualBox 7.2.16 lets a low-privileged user who can log on to the host repeatedly crash the hypervisor process and tamper with some VirtualBox-accessible data. The issue requires only local logon with low privileges (CVSS:3.1/AV:L/AC:L/PR:L/UI:N), no user interaction, and no network exposure, yielding a 6.1 base score driven by Availability (High) and Integrity (Low) impacts with no Confidentiality impact. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The attacker must first obtain a low-privileged interactive logon session on the same host where Oracle VM VirtualBox 7.2.16 executes (CVSS PR:L, AV:L) and must be able to invoke the VirtualBox Core functionality available to that account - in practice, membership in the group that grants access to the host device/driver (vboxusers on Linux, or an equivalent host account permitted to run VirtualBox and its management interfaces). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals here are consistent rather than conflicting: CVSS 6.1 (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) from Oracle, EUVD-2026-79931, and a single NVD reference to the Oracle Critical Patch Update all point to a locally triggered, low-complexity, low-privilege issue with no confidentiality loss. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the fixed VirtualBox build released in the Oracle Critical Patch Update referenced at https://www.oracle.com/security-alerts/cspusep2026.html - the input does not state an exact patched version, so treat the CPU advisory as authoritative and upgrade to the 7.2.x maintenance release it identifies (the affected release is 7.2.16, so any fix will be that version or later). … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today