VulnerabilitycriticalExploited in the wild

Oracle issues patches for 10 'virtual machine escape' flaws in VirtualBox

CyberScoopby @HowellONeillJan 26, 2018 · 19:06 UTC (Jan 26, 2018)2 min read2 · 1 read

Read at cyberscoop.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2018-2698 CVE-2018-2694 CVE-2017-5753 CVE-2017-5715 CVE-2017-5754

Tags: cve-2018-2698 cve-2018-2694 cve-2017-5753 cve-2017-5715 cve-2017-5754 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-5753 +2 related CVEs CVE-2017-5754 CVE-2017-5715	Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local…	5.6	94%	PoC	Jan 4, 2018
CVE-2018-2698 +1 related CVE CVE-2018-2694	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent	8.8	2%		Jan 18, 2018

From the original article

2 min read at cyberscoop.com

The "easily exploitable" vulnerabilities allow a hacker to stage a "virtual machine escape" to attack the host operating system. Enterprise tech giant Oracle released a collection of critical security patches this month to address 10 exploitable vulnerabilities in VirtualBox. Both popular and powerful, VirtualBox is Oracle’s hypervisor, which allows users to run virtual machines on a user’s host operating system.

CyberScoop

By @HowellONeill · cyberscoop.com

Read the full article at CyberScoop

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.