{"schema_version":1,"title":"Oracle VirtualBox vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 70 vulnerabilities in Oracle VirtualBox: 0 in the last 7 days and 55 in the last 90 days, 1 of them critical and 1 exploited in the wild. The most recent, CVE-2026-87285, was published on 15 September 2026.","url":"https://junglewise.ai/threats/technologies/virtualbox","json_url":"https://junglewise.ai/threats/technologies/virtualbox.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/virtualbox","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":28,"all_time":70,"critical":1,"exploited":1,"last_7_days":0,"last_30_days":18,"last_90_days":55,"last_365_days":65},"latest":[{"cve":"CVE-2026-87285","cvss":6,"epss":0.0017,"slug":"cve-2026-87285-oracle-vm-virtualbox-denial-of-service-in-core","title":"Oracle VM VirtualBox denial of service in Core","severity":"medium","exploited":false,"published_at":"2026-09-15T20:19:18.45+00:00","url":"https://junglewise.ai/threats/cve-2026-87285-oracle-vm-virtualbox-denial-of-service-in-core"},{"cve":"CVE-2026-87284","cvss":3.2,"epss":0.0015,"slug":"cve-2026-87284-oracle-vm-virtualbox-denial-of-service-in-core","title":"Oracle VM VirtualBox denial of service in Core","severity":"low","exploited":false,"published_at":"2026-09-15T20:19:18.33+00:00","url":"https://junglewise.ai/threats/cve-2026-87284-oracle-vm-virtualbox-denial-of-service-in-core"},{"cve":"CVE-2026-87283","cvss":6,"epss":0.0017,"slug":"cve-2026-87283-oracle-vm-virtualbox-denial-of-service-in-core","title":"Oracle VM VirtualBox denial of service in Core","severity":"medium","exploited":false,"published_at":"2026-09-15T20:19:17.933+00:00","url":"https://junglewise.ai/threats/cve-2026-87283-oracle-vm-virtualbox-denial-of-service-in-core"},{"cve":"CVE-2026-87282","cvss":6,"epss":0.0017,"slug":"cve-2026-87282-oracle-vm-virtualbox-denial-of-service-in-core","title":"Oracle VM VirtualBox denial of service in Core","severity":"medium","exploited":false,"published_at":"2026-09-15T20:19:17.023+00:00","url":"https://junglewise.ai/threats/cve-2026-87282-oracle-vm-virtualbox-denial-of-service-in-core"},{"cve":"CVE-2026-87281","cvss":3.2,"epss":0.0016,"slug":"cve-2026-87281-oracle-vm-virtualbox-information-disclosure-in-core","title":"Oracle VM VirtualBox information disclosure in Core","severity":"low","exploited":false,"published_at":"2026-09-15T20:19:16.903+00:00","url":"https://junglewise.ai/threats/cve-2026-87281-oracle-vm-virtualbox-information-disclosure-in-core"},{"cve":"CVE-2026-87280","cvss":4.2,"epss":0.0015,"slug":"cve-2026-87280-oracle-vm-virtualbox-denial-of-service-in-core","title":"Oracle VM VirtualBox denial of service in Core","severity":"medium","exploited":false,"published_at":"2026-09-15T20:19:16.79+00:00","url":"https://junglewise.ai/threats/cve-2026-87280-oracle-vm-virtualbox-denial-of-service-in-core"},{"cve":"CVE-2026-87279","cvss":6.1,"epss":0.0015,"slug":"cve-2026-87279-oracle-vm-virtualbox-denial-of-service-in-core-component","title":"Oracle VM VirtualBox denial of service in Core component","severity":"medium","exploited":false,"published_at":"2026-09-15T20:19:16.68+00:00","url":"https://junglewise.ai/threats/cve-2026-87279-oracle-vm-virtualbox-denial-of-service-in-core-component"},{"cve":"CVE-2026-87278","cvss":6.1,"epss":0.0015,"slug":"cve-2026-87278-oracle-vm-virtualbox-denial-of-service-and-data-modification-in","title":"Oracle VM VirtualBox denial of service and data modification in Core","severity":"medium","exploited":false,"published_at":"2026-09-15T20:19:16.57+00:00","url":"https://junglewise.ai/threats/cve-2026-87278-oracle-vm-virtualbox-denial-of-service-and-data-modification-in"},{"cve":"CVE-2026-87277","cvss":7.5,"epss":0.0047,"slug":"cve-2026-87277-oracle-vm-virtualbox-denial-of-service-via-rdp","title":"Oracle VM VirtualBox denial of service via RDP","severity":"high","exploited":false,"published_at":"2026-09-15T20:19:16.46+00:00","url":"https://junglewise.ai/threats/cve-2026-87277-oracle-vm-virtualbox-denial-of-service-via-rdp"},{"cve":"CVE-2026-87276","cvss":7.5,"epss":0.0013,"slug":"cve-2026-87276-oracle-virtualbox-privilege-escalation-in-core","title":"Oracle VirtualBox privilege escalation in Core","severity":"high","exploited":false,"published_at":"2026-09-15T20:19:16.353+00:00","url":"https://junglewise.ai/threats/cve-2026-87276-oracle-virtualbox-privilege-escalation-in-core"},{"cve":"CVE-2026-87275","cvss":4.6,"epss":0.0016,"slug":"cve-2026-87275-oracle-vm-virtualbox-information-disclosure-and-denial-of-service","title":"Oracle VM VirtualBox information disclosure and denial of service in Core","severity":"medium","exploited":false,"published_at":"2026-09-15T20:19:16.243+00:00","url":"https://junglewise.ai/threats/cve-2026-87275-oracle-vm-virtualbox-information-disclosure-and-denial-of-service"},{"cve":"CVE-2026-87274","cvss":4.4,"epss":0.0012,"slug":"cve-2026-87274-oracle-vm-virtualbox-denial-of-service-in-core","title":"Oracle VM VirtualBox denial of service in Core","severity":"medium","exploited":false,"published_at":"2026-09-15T20:19:16.133+00:00","url":"https://junglewise.ai/threats/cve-2026-87274-oracle-vm-virtualbox-denial-of-service-in-core"},{"cve":"CVE-2026-87273","cvss":8.6,"epss":0.0018,"slug":"cve-2026-87273-oracle-vm-virtualbox-privilege-escalation-in-core","title":"Oracle VM VirtualBox privilege escalation in Core","severity":"high","exploited":false,"published_at":"2026-09-15T20:19:16.023+00:00","url":"https://junglewise.ai/threats/cve-2026-87273-oracle-vm-virtualbox-privilege-escalation-in-core"},{"cve":"CVE-2026-87271","cvss":7.8,"epss":0.0016,"slug":"cve-2026-87271-oracle-vm-virtualbox-privilege-escalation-in-core","title":"Oracle VM VirtualBox privilege escalation in Core","severity":"high","exploited":false,"published_at":"2026-09-15T20:19:15.81+00:00","url":"https://junglewise.ai/threats/cve-2026-87271-oracle-vm-virtualbox-privilege-escalation-in-core"},{"cve":"CVE-2026-87270","cvss":7.8,"epss":0.0016,"slug":"cve-2026-87270-oracle-vm-virtualbox-privilege-escalation-in-core","title":"Oracle VM VirtualBox privilege escalation in Core","severity":"high","exploited":false,"published_at":"2026-09-15T20:19:15.7+00:00","url":"https://junglewise.ai/threats/cve-2026-87270-oracle-vm-virtualbox-privilege-escalation-in-core"},{"cve":"CVE-2026-87269","cvss":7.8,"epss":0.0016,"slug":"cve-2026-87269-oracle-vm-virtualbox-privilege-escalation-in-core-on-windows","title":"Oracle VM VirtualBox privilege escalation in Core on Windows","severity":"high","exploited":false,"published_at":"2026-09-15T20:19:15.593+00:00","url":"https://junglewise.ai/threats/cve-2026-87269-oracle-vm-virtualbox-privilege-escalation-in-core-on-windows"},{"cve":"CVE-2026-87268","cvss":7.8,"epss":0.0016,"slug":"cve-2026-87268-oracle-vm-virtualbox-privilege-escalation-in-core","title":"Oracle VM VirtualBox privilege escalation in Core","severity":"high","exploited":false,"published_at":"2026-09-15T20:19:15.483+00:00","url":"https://junglewise.ai/threats/cve-2026-87268-oracle-vm-virtualbox-privilege-escalation-in-core"},{"cve":"CVE-2026-87267","cvss":5.3,"epss":0.0034,"slug":"cve-2026-87267-oracle-vm-virtualbox-denial-of-service-via-rdp","title":"Oracle VM VirtualBox denial of service via RDP","severity":"medium","exploited":false,"published_at":"2026-09-15T20:19:15.37+00:00","url":"https://junglewise.ai/threats/cve-2026-87267-oracle-vm-virtualbox-denial-of-service-via-rdp"},{"cve":"CVE-2026-71151","cvss":5.6,"epss":0.0013,"slug":"cve-2026-71151-oracle-vm-virtualbox-privilege-escalation-via-core-component","title":"Oracle VM VirtualBox privilege escalation via Core component","severity":"medium","exploited":false,"published_at":"2026-08-18T21:18:16.167+00:00","url":"https://junglewise.ai/threats/cve-2026-71151-oracle-vm-virtualbox-privilege-escalation-via-core-component"},{"cve":"CVE-2026-71141","cvss":7.7,"epss":0.0017,"slug":"cve-2026-71141-oracle-vm-virtualbox-local-privilege-escalation-in-core-component","title":"Oracle VM VirtualBox local privilege escalation in Core component","severity":"high","exploited":false,"published_at":"2026-08-18T21:18:15.017+00:00","url":"https://junglewise.ai/threats/cve-2026-71141-oracle-vm-virtualbox-local-privilege-escalation-in-core-component"},{"cve":"CVE-2026-71140","cvss":3.4,"epss":0.0016,"slug":"cve-2026-71140-oracle-vm-virtualbox-data-access-vulnerability-in-core","title":"Oracle VM VirtualBox data access vulnerability in Core","severity":"low","exploited":false,"published_at":"2026-08-18T21:18:14.903+00:00","url":"https://junglewise.ai/threats/cve-2026-71140-oracle-vm-virtualbox-data-access-vulnerability-in-core"},{"cve":"CVE-2026-71139","cvss":4.4,"epss":0.0017,"slug":"cve-2026-71139-oracle-vm-virtualbox-denial-of-service-in-core","title":"Oracle VM VirtualBox denial of service in Core","severity":"medium","exploited":false,"published_at":"2026-08-18T21:18:14.79+00:00","url":"https://junglewise.ai/threats/cve-2026-71139-oracle-vm-virtualbox-denial-of-service-in-core"},{"cve":"CVE-2026-71138","cvss":7.3,"epss":0.0016,"slug":"cve-2026-71138-oracle-vm-virtualbox-denial-of-service-and-data-access-in-core","title":"Oracle VM VirtualBox denial of service and data access in Core component","severity":"high","exploited":false,"published_at":"2026-08-18T21:18:14.677+00:00","url":"https://junglewise.ai/threats/cve-2026-71138-oracle-vm-virtualbox-denial-of-service-and-data-access-in-core"},{"cve":"CVE-2026-71137","cvss":6,"epss":0.0016,"slug":"cve-2026-71137-oracle-vm-virtualbox-denial-of-service-in-core","title":"Oracle VM VirtualBox denial of service in Core","severity":"medium","exploited":false,"published_at":"2026-08-18T21:18:14.56+00:00","url":"https://junglewise.ai/threats/cve-2026-71137-oracle-vm-virtualbox-denial-of-service-in-core"},{"cve":"CVE-2026-71136","cvss":7.3,"epss":0.0016,"slug":"cve-2026-71136-oracle-vm-virtualbox-privilege-escalation-in-core-component","title":"Oracle VM VirtualBox privilege escalation in Core component","severity":"high","exploited":false,"published_at":"2026-08-18T21:18:14.44+00:00","url":"https://junglewise.ai/threats/cve-2026-71136-oracle-vm-virtualbox-privilege-escalation-in-core-component"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":16},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":21},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":18},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Oracle Hyperion Financial Management","slug":"hyperion-financial-management","vulnerabilities":129,"url":"https://junglewise.ai/threats/technologies/hyperion-financial-management"},{"name":"Oracle Coherence","slug":"coherence","vulnerabilities":113,"url":"https://junglewise.ai/threats/technologies/coherence"},{"name":"Oracle E-Business Suite","slug":"e-business-suite","vulnerabilities":83,"url":"https://junglewise.ai/threats/technologies/e-business-suite"},{"name":"Oracle Commerce Guided Search","slug":"commerce-guided-search","vulnerabilities":82,"url":"https://junglewise.ai/threats/technologies/commerce-guided-search"},{"name":"Oracle Commerce Experience Manager","slug":"commerce-experience-manager","vulnerabilities":81,"url":"https://junglewise.ai/threats/technologies/commerce-experience-manager"},{"name":"Oracle WebCenter Content","slug":"webcenter-content","vulnerabilities":73,"url":"https://junglewise.ai/threats/technologies/webcenter-content"},{"name":"Oracle Helidon","slug":"helidon","vulnerabilities":68,"url":"https://junglewise.ai/threats/technologies/helidon"},{"name":"Oracle MySQL Server","slug":"mysql-server","vulnerabilities":60,"url":"https://junglewise.ai/threats/technologies/mysql-server"},{"name":"Oracle Hyperion Data Relationship Management","slug":"hyperion-data-relationship-management","vulnerabilities":56,"url":"https://junglewise.ai/threats/technologies/hyperion-data-relationship-management"},{"name":"Oracle WebLogic Server","slug":"weblogic-server","vulnerabilities":55,"url":"https://junglewise.ai/threats/technologies/weblogic-server"},{"name":"Oracle Java SE","slug":"java-se","vulnerabilities":52,"url":"https://junglewise.ai/threats/technologies/java-se"},{"name":"Oracle MySQL Cluster","slug":"mysql-cluster","vulnerabilities":49,"url":"https://junglewise.ai/threats/technologies/mysql-cluster"}],"technology":{"hub":true,"name":"Oracle VirtualBox","slug":"virtualbox","vendor":{"name":"Oracle","slug":"oracle","url":"https://junglewise.ai/threats/vendors/oracle"},"aliases":["vm-virtualbox"],"category":"hypervisor","homepage":"https://www.virtualbox.org/","repo_url":"https://www.virtualbox.org/browser/vbox/trunk","description":"VirtualBox is an open-source hosted hypervisor for x86 virtualization.","url":"https://junglewise.ai/threats/technologies/virtualbox"},"most_severe":[{"cve":"CVE-2008-3431","cvss":8.8,"slug":"cve-2008-3431-oracle-virtualbox-insufficient-input-validation-vulnerability","title":"Oracle VirtualBox Insufficient Input Validation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2008-3431-oracle-virtualbox-insufficient-input-validation-vulnerability"},{"cve":"CVE-2026-87273","cvss":8.6,"epss":0.0018,"slug":"cve-2026-87273-oracle-vm-virtualbox-privilege-escalation-in-core","title":"Oracle VM VirtualBox privilege escalation in Core","severity":"high","exploited":false,"published_at":"2026-09-15T20:19:16.023+00:00","url":"https://junglewise.ai/threats/cve-2026-87273-oracle-vm-virtualbox-privilege-escalation-in-core"},{"cve":"CVE-2026-71131","cvss":8.6,"epss":0.0018,"slug":"cve-2026-71131-oracle-vm-virtualbox-privilege-escalation-in-core","title":"Oracle VM VirtualBox privilege escalation in Core","severity":"high","exploited":false,"published_at":"2026-08-18T21:18:13.967+00:00","url":"https://junglewise.ai/threats/cve-2026-71131-oracle-vm-virtualbox-privilege-escalation-in-core"},{"cve":"CVE-2017-3332","cvss":8.4,"slug":"cve-2017-3332-oracle-vm-virtualbox-integrity-and-availability-breach-in-svga","title":"Oracle VM VirtualBox integrity and availability breach in SVGA Emulation","severity":"high","exploited":false,"published_at":"2017-01-27T22:59:04.927+00:00","url":"https://junglewise.ai/threats/cve-2017-3332-oracle-vm-virtualbox-integrity-and-availability-breach-in-svga"},{"cve":"CVE-2017-3316","cvss":8.4,"slug":"cve-2017-3316-oracle-vm-virtualbox-privilege-escalation-in-gui-update-downloader","title":"Oracle VM VirtualBox privilege escalation in GUI update downloader","severity":"high","exploited":false,"published_at":"2017-01-27T22:59:04.477+00:00","url":"https://junglewise.ai/threats/cve-2017-3316-oracle-vm-virtualbox-privilege-escalation-in-gui-update-downloader"},{"cve":"CVE-2026-71130","cvss":8.2,"epss":0.0035,"slug":"cve-2026-71130-oracle-vm-virtualbox-rdp-remote-access-vulnerability-in-core","title":"Oracle VM VirtualBox RDP remote access vulnerability in Core","severity":"high","exploited":false,"published_at":"2026-08-18T21:18:13.853+00:00","url":"https://junglewise.ai/threats/cve-2026-71130-oracle-vm-virtualbox-rdp-remote-access-vulnerability-in-core"},{"cve":"CVE-2026-71129","cvss":8.2,"epss":0.0018,"slug":"cve-2026-71129-oracle-vm-virtualbox-privilege-escalation-in-core","title":"Oracle VM VirtualBox privilege escalation in Core","severity":"high","exploited":false,"published_at":"2026-08-18T21:18:13.737+00:00","url":"https://junglewise.ai/threats/cve-2026-71129-oracle-vm-virtualbox-privilege-escalation-in-core"},{"cve":"CVE-2017-3290","cvss":7.9,"slug":"cve-2017-3290-oracle-vm-virtualbox-integrity-and-dos-vulnerability-in-shared","title":"Oracle VM VirtualBox integrity and DoS vulnerability in Shared Folder","severity":"high","exploited":false,"published_at":"2017-01-27T22:59:03.88+00:00","url":"https://junglewise.ai/threats/cve-2017-3290-oracle-vm-virtualbox-integrity-and-dos-vulnerability-in-shared"},{"cve":"CVE-2026-87271","cvss":7.8,"epss":0.0016,"slug":"cve-2026-87271-oracle-vm-virtualbox-privilege-escalation-in-core","title":"Oracle VM VirtualBox privilege escalation in Core","severity":"high","exploited":false,"published_at":"2026-09-15T20:19:15.81+00:00","url":"https://junglewise.ai/threats/cve-2026-87271-oracle-vm-virtualbox-privilege-escalation-in-core"},{"cve":"CVE-2026-87270","cvss":7.8,"epss":0.0016,"slug":"cve-2026-87270-oracle-vm-virtualbox-privilege-escalation-in-core","title":"Oracle VM VirtualBox privilege escalation in Core","severity":"high","exploited":false,"published_at":"2026-09-15T20:19:15.7+00:00","url":"https://junglewise.ai/threats/cve-2026-87270-oracle-vm-virtualbox-privilege-escalation-in-core"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}