Oracle VirtualBox VMSVGA Race Condition Local Privilege Escalation Vulnerability

Oracle VirtualBox contains a privilege escalation vulnerability (CVE-2026-21984) that allows local attackers with high-privileged code execution on a guest system to escalate their privileges further on the host. This HIGH severity issue (CVSS 7.5) could enable attackers to gain complete control of virtualized environments. Security teams should prioritize patching Oracle VirtualBox systems and review access controls to limit which users can execute privileged code on guest systems.