PT-2025-42999 · Oracle+1 · Virtualbox+1

Published 2025-10-21 · Updated 2025-12-16 · CVE-2025-62587

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions 7.1.12 and 7.2.2

Description A security flaw exists within the Core component of Oracle VM VirtualBox. A highly privileged attacker with local access can compromise the VirtualBox environment, potentially gaining full control over the affected system. Successful attacks can result in takeover of Oracle VM VirtualBox.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Fix

Weakness Enumeration

CWE-267

Related Identifiers

BDU:2025-13295

CVE-2025-62587

Affected Products

Virtualbox

Red Os

References · 17

• https://nvd.nist.gov/vuln/detail/CVE-2025-62587 · Security Note
• https://bdu.fstec.ru/vul/2025-13295 · Security Note
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://oracle.com/security-alerts/cpuoct2025.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-62587 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-62587 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-62587 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-62587 · Vendor Advisory
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti-red-os-8-0/uyazvimost-virtualbox-guest-additions-cve-2025-62587-8.0 · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/uyazvimost-virtualbox-kmod-cve-2025-62587-7.3 · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/uyazvimost-virtualbox-guest-additions-cve-2025-62587-7.3 · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti-red-os-8-0/uyazvimost-virtualbox-kmod-cve-2025-62587-8.0 · Note
• https://twitter.com/CveTodo/status/1980743154140623201 · Twitter Post
• https://twitter.com/CVEnew/status/1980736576381751329 · Twitter Post
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/uyazvimost-virtualbox-cve-2025-62587-7.3 · Note