Medium WID-SEC-2026-1949 10 CVEs

Oracle VM VirtualBox: Mehrere Schwachstellen

Published Jun 16, 2026 · Updated Jun 24, 2026 · Revision 2 · de-DE

Vendor: Oracle Product: VM Platform: Linux Platform: macOS Platform: Windows

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Oracle VM VirtualBox ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Oracle Virtualization ist eine Sammlung von Werkzeugen zur Verwaltung und zur Virtualisierung von Hard- und Software.

Vulnerabilities 10

High 7.5

CVE-2026-35275

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Shared Folders). The supported v…

Oracle Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Jun 16, 2026
High 7.5

CVE-2026-46873

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device). The supported ve…

Oracle Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Jun 16, 2026
High 7.5

CVE-2026-46974

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…

Oracle Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Jun 16, 2026
Medium 6.0

CVE-2026-46768

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device). The supported ve…

Oracle Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Jun 16, 2026
Medium 6.0

CVE-2026-46825

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device). The supported ve…

Oracle Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Jun 16, 2026
Medium 6.0

CVE-2026-46877

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device). The supported ve…

Oracle Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Jun 16, 2026
Low 3.2

CVE-2026-46815

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device). The supported ve…

Oracle Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Jun 16, 2026
Low 3.2

CVE-2026-46816

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device). The supported ve…

Oracle Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Jun 16, 2026
Low 3.2

CVE-2026-46874

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…

Oracle Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Jun 16, 2026
Low 3.2

CVE-2026-46977

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device). The supported ve…

Oracle Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Jun 16, 2026

Revision history

2026-06-24 #2
Referenz(en) aufgenommen: ZDI-26-362, ZDI-CAN-29271
2026-06-16 #1
Initiale Fassung

References

Oracle Critical Security Patch Update Advisory - June 2026 - Appendix Oracle Virtualization vom 2026-06-16
https://www.oracle.com/security-alerts/cspujun2026.html#AppendixOVIR