Oracle · Virtualbox · CVE-2026-21989
**Name of the Vulnerable Software and Affected Versions**
Oracle VM VirtualBox versions 7.1.14 and 7.2.4
**Description**
An easily exploitable issue exists in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). A high-privileged attacker with access to the infrastructure where Oracle VM VirtualBox runs can compromise the software. Successful exploitation may lead to unauthorized creation, deletion, or modification of critical data, complete access to Oracle VM VirtualBox accessible data, and a partial denial of service. Attacks may significantly impact additional products.
**Recommendations**
Update Oracle VM VirtualBox to a version newer than 7.2.4.
Update Oracle VM VirtualBox to a version newer than 7.1.14.