Multiple vulnerabilities in Oracle VirtualBox

Описание

Multiple vulnerabilities were found in Oracle VirtualBox. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, cause denial of service.

Below is a complete list of vulnerabilities:

1. A security bypass vulnerability in Core component can be exploited to bypass security restrictions and obtain sensitive information.
2. A security bypass vulnerability in Core component for Linux can be exploited to bypass security restrictions and obtain sensitive information.
3. A denial of service vulnerability in Core component for Windows can be exploited to cause denial of service.
4. A security bypass vulnerability in Core component can be exploited to bypass security restrictions.
5. A security bypass vulnerability in Core component for Windows can be exploited to bypass security restrictions.

Первичный источник обнаружения

• Oracle Critical Patch Update Advisory - April 2021
  

Эксплуатация

Public exploits exist for this vulnerability.

Связанные продукты

• Oracle-VirtualBox

Список CVE

• CVE-2021-2279
  critical
• CVE-2021-2296
  high
• CVE-2021-2264
  critical
• CVE-2021-2312
  warning
• CVE-2021-2297
  high
• CVE-2021-2291
  warning
• CVE-2021-2306
  high
• CVE-2021-2309
  critical
• CVE-2021-2282
  high
• CVE-2021-2266
  high
• CVE-2021-2321
  high
• CVE-2021-2285
  high
• CVE-2021-2287
  high
• CVE-2021-2281
  high
• CVE-2021-2283
  high
• CVE-2021-2145
  critical
• CVE-2021-2250
  critical
• CVE-2021-2310
  critical
• CVE-2021-2286
  high
• CVE-2021-2284
  high
• CVE-2021-2280
  high

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com