Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Oliver Bachtik

Researcher fromNVISO
#33042of 53,635
7.8Total CVSS
Vulnerabilities · 1
PT-2021-7000
7.8
2021-11-15
Oracle · Virtualbox · CVE-2022-21491
**Name of the Vulnerable Software and Affected Versions** Oracle VM VirtualBox versions prior to 6.1.34 **Description** The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, which can be exploited by a low-privileged attacker with logon access to the infrastructure where Oracle VM VirtualBox executes. This can result in the takeover of Oracle VM VirtualBox. The vulnerability specifically affects Windows systems. **Recommendations** For versions prior to 6.1.34, update to version 6.1.34 or later to resolve the issue. As a temporary workaround, consider restricting access to the Core component of Oracle VM VirtualBox to minimize the risk of exploitation.