Cody Gallagher

**Name of the Vulnerable Software and Affected Versions** Sonos Era 300 (affected versions not specified) **Description** The issue is related to a heap-based buffer overflow that allows for remote code execution. This was demonstrated at Pwn2Own. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Oracle VM VirtualBox versions prior to 7.0.16 **Description** The issue is related to an out-of-bounds write vulnerability in the Core component of Oracle VM VirtualBox. This vulnerability can be easily exploited by a low-privileged attacker with logon access to the infrastructure where Oracle VM VirtualBox executes, allowing them to compromise Oracle VM VirtualBox. Successful attacks can result in the takeover of Oracle VM VirtualBox and may significantly impact additional products due to scope change. **Recommendations** For versions prior to 7.0.16, update to version 7.0.16 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable Core component of Oracle VM VirtualBox to minimize the risk of exploitation.