KLA11521
Multiple vulnerabilities in Oracle VirtualBox

Multiple vulnerabilities were found in Oracle VirtualBox. Malicious users can exploit these vulnerabilities to bypass security restrictions, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. Multiple vulnerabilities in Core component of Oracle VM VirtualBox can be exploited locally to unspecified impact;
2. Vulnerability in Core (OpenSSL) component of Oracle VM VirtualBox can be exploited remotely to obtain sensitive information and bypass security restrictions.

Technical details

The vulnerability affects Windows platforms only.

Oracle VirtualBox prior to 5.2.32, prior to 6.0.10

Update to the latest version

Oracle Critical Patch Update Advisory – July 2019