Oracle · Virtualbox · CVE-2022-21491
**Name of the Vulnerable Software and Affected Versions**
Oracle VM VirtualBox versions prior to 6.1.34
**Description**
The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, which can be exploited by a low-privileged attacker with logon access to the infrastructure where Oracle VM VirtualBox executes. This can result in the takeover of Oracle VM VirtualBox. The vulnerability specifically affects Windows systems.
**Recommendations**
For versions prior to 6.1.34, update to version 6.1.34 or later to resolve the issue. As a temporary workaround, consider restricting access to the Core component of Oracle VM VirtualBox to minimize the risk of exploitation.