Multiple vulnerabilities in Oracle VirtualBox

Description

Multiple vulnerabilities were found in Oracle VirtualBox. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, cause denial of service.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Core can be exploited remotely to gain privileges.
2. An elevation of privilege vulnerability in Core can be exploited remotely to gain privileges, denial of service and obtain sensitive information.

Original advisories

• Oracle Critical Patch Update Advisory – October 2022

Exploitation

Public exploits exist for this vulnerability.

Related products

• Oracle-VirtualBox

CVE list

• CVE-2022-39422
  critical
• CVE-2022-39423
  high

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com