Oracle VirtualBox

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenSep 9, 2026
Last mentionedSep 9, 2026

Timeline

2 articles · newest first

ZDI-26-640: Oracle VirtualBox VirtioSCSI Uninitialized Memory Information Disclosure Vulnerability

ZDI detailed an uninitialized memory flaw in Oracle VirtualBox's VirtioSCSI (CVE-2026-71132) allowing local attackers to disclose sensitive information.

ZDI Published AdvisoriesSep 9, 05:00 UTC · Sep 9, 2026Vulnerability 6 sourcesCVE-2026-711321

ZDI-26-639: Oracle VirtualBox VMSVGA Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

ZDI disclosed a heap-based buffer overflow in Oracle VirtualBox's VMSVGA component (CVE-2026-71116) enabling local privilege escalation.

ZDI Published AdvisoriesSep 9, 05:00 UTC · Sep 9, 2026Vulnerability 6 sourcesCVE-2026-711164

Related CVEs

by mentions

CVE-2026-71116<1%7.5
Heap-Based Buffer Overflow in Oracle VM VirtualBox VMSVGA Enables Local Privilege Escalation
published Aug 18, 2026Oracle VM VirtualBox (Core)
CVE-2026-71132<1%5.3
Information Disclosure in Oracle VM VirtualBox 7.2.14 (VirtioSCSI)
published Aug 18, 2026Oracle VM VirtualBox

Appears with

Oraclevendor · 2
Zero Day Initiativevendor · 2

Entities are extracted by the model from each article. First seen Sep 9, 2026, last mentioned Sep 9, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.