Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/virtualbox@7.2.6-dfsg-1?distro=sid
purl pkg:deb/debian/virtualbox@7.2.6-dfsg-1?distro=sid
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (14)
Vulnerability Summary Aliases
VCID-2f6u-9ns4-s3bx Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N). CVE-2026-21985
VCID-3nw6-9452-6bgk Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H). CVE-2026-21984
VCID-3y8r-53vp-cbbx Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H). CVE-2026-21982
VCID-8fwv-bnnu-7bf7 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N). CVE-2026-21963
VCID-9nhh-x1t1-uqcq Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. Note: This vulnerability applies to Windows VMs only. CVSS 3.1 Base Score 7.1 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H). CVE-2026-21986
VCID-am22-e2qp-abgn Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H). CVE-2026-21956
VCID-bmx5-9hrx-5be9 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H). CVE-2026-21955
VCID-d9ub-1pgd-bfc2 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H). CVE-2026-21983
VCID-dhj9-zmhu-afe9 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle VM VirtualBox accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 4.6 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:L). CVE-2026-21981
VCID-dn5h-hfy6-sfaq Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H). CVE-2026-21987
VCID-fuqf-teut-wugw Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H). CVE-2026-21957
VCID-k56n-ns61-fqe5 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H). CVE-2026-21988
VCID-kjsq-rfp7-qbcx Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H). CVE-2026-21990
VCID-q879-2fzs-7fha Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data as well as unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L). CVE-2026-21989

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T12:29:23.491175+00:00 Debian Importer Fixing VCID-2f6u-9ns4-s3bx https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T11:16:16.158733+00:00 Debian Importer Fixing VCID-am22-e2qp-abgn https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T11:10:22.234234+00:00 Debian Importer Fixing VCID-9nhh-x1t1-uqcq https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:43:13.479642+00:00 Debian Importer Fixing VCID-kjsq-rfp7-qbcx https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:39:12.934208+00:00 Debian Importer Fixing VCID-3y8r-53vp-cbbx https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:30:15.150421+00:00 Debian Importer Fixing VCID-dn5h-hfy6-sfaq https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:16:58.326752+00:00 Debian Importer Fixing VCID-3nw6-9452-6bgk https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:01:29.340523+00:00 Debian Importer Fixing VCID-dhj9-zmhu-afe9 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:45:15.083343+00:00 Debian Importer Fixing VCID-fuqf-teut-wugw https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:41:35.196753+00:00 Debian Importer Fixing VCID-d9ub-1pgd-bfc2 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:33:49.399670+00:00 Debian Importer Fixing VCID-8fwv-bnnu-7bf7 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T08:58:51.438471+00:00 Debian Importer Fixing VCID-bmx5-9hrx-5be9 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T08:46:26.869319+00:00 Debian Importer Fixing VCID-q879-2fzs-7fha https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T08:41:01.425792+00:00 Debian Importer Fixing VCID-k56n-ns61-fqe5 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T08:33:03.758479+00:00 Debian Importer Fixing VCID-2f6u-9ns4-s3bx https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:39:59.705756+00:00 Debian Importer Fixing VCID-am22-e2qp-abgn https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:35:37.889547+00:00 Debian Importer Fixing VCID-9nhh-x1t1-uqcq https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:14:59.138671+00:00 Debian Importer Fixing VCID-kjsq-rfp7-qbcx https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:12:12.518078+00:00 Debian Importer Fixing VCID-3y8r-53vp-cbbx https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:05:27.020399+00:00 Debian Importer Fixing VCID-dn5h-hfy6-sfaq https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T06:55:05.826849+00:00 Debian Importer Fixing VCID-3nw6-9452-6bgk https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T06:43:21.026374+00:00 Debian Importer Fixing VCID-dhj9-zmhu-afe9 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T06:30:37.272081+00:00 Debian Importer Fixing VCID-fuqf-teut-wugw https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:26:50.505502+00:00 Debian Importer Fixing VCID-d9ub-1pgd-bfc2 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:22:22.998168+00:00 Debian Importer Fixing VCID-8fwv-bnnu-7bf7 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:01:25.747252+00:00 Debian Importer Fixing VCID-bmx5-9hrx-5be9 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T17:53:35.391412+00:00 Debian Importer Fixing VCID-q879-2fzs-7fha https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T17:50:12.505036+00:00 Debian Importer Fixing VCID-k56n-ns61-fqe5 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:56:16.287932+00:00 Debian Importer Fixing VCID-kjsq-rfp7-qbcx https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:56:16.264761+00:00 Debian Importer Fixing VCID-q879-2fzs-7fha https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:56:16.241349+00:00 Debian Importer Fixing VCID-k56n-ns61-fqe5 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:56:16.218052+00:00 Debian Importer Fixing VCID-dn5h-hfy6-sfaq https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:56:16.194389+00:00 Debian Importer Fixing VCID-9nhh-x1t1-uqcq https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:56:16.170487+00:00 Debian Importer Fixing VCID-2f6u-9ns4-s3bx https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:56:16.147052+00:00 Debian Importer Fixing VCID-3nw6-9452-6bgk https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:56:16.123770+00:00 Debian Importer Fixing VCID-d9ub-1pgd-bfc2 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:56:16.100477+00:00 Debian Importer Fixing VCID-3y8r-53vp-cbbx https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:56:16.077153+00:00 Debian Importer Fixing VCID-dhj9-zmhu-afe9 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:56:16.053811+00:00 Debian Importer Fixing VCID-8fwv-bnnu-7bf7 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:56:16.030482+00:00 Debian Importer Fixing VCID-fuqf-teut-wugw https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:56:16.007073+00:00 Debian Importer Fixing VCID-am22-e2qp-abgn https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:56:15.983793+00:00 Debian Importer Fixing VCID-bmx5-9hrx-5be9 https://security-tracker.debian.org/tracker/data/json 38.1.0