Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H).
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
Oracle VirtualBox における Windows ゲスト向け VBoxSVGA ドライバのバッファオーバーリード脆弱性 (CVE-2026-87279) が公表されました。 https://www.cve.org/CVERecord?id=CVE-2026-87279 https://www.oracle.com/security-alerts/cspusep2026.html
Post summary
The post discloses a buffer over-read vulnerability in Oracle VirtualBox's VBoxSVGA driver for Windows guests (CVE-2026-87279) and points to an Oracle security advisory for remediation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | oracle | vm_virtualbox | 7.2.16 | - | - |