Oracle · Virtualbox · CVE-2024-21263
**Name of the Vulnerable Software and Affected Versions**
Oracle VM VirtualBox versions prior to 7.0.22
Oracle VM VirtualBox versions prior to 7.1.2
**Description**
The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, allowing a low-privileged attacker with logon to the infrastructure to compromise Oracle VM VirtualBox. Successful attacks can result in unauthorized ability to cause a hang or frequently repeatable crash of Oracle VM VirtualBox and unauthorized read access to a subset of Oracle VM VirtualBox accessible data.
**Recommendations**
For Oracle VM VirtualBox versions prior to 7.0.22, update to version 7.0.22 or later.
For Oracle VM VirtualBox versions prior to 7.1.2, update to version 7.1.2 or later.
As a temporary workaround, consider restricting access to the Core component of Oracle VM VirtualBox until a patch is available.