Sploitus

66 exploited vulnerabilities in Virtualbox

Showing 1–50 of 66, highest-scoring first

Vendors
Alt Linux, Oracle, Centos, Linux, Red Hat, Suse
With known exploits
66
Affected Oracle Vm Virtualbox versions
< 6.1.40, 5.2.36, 6.0.16, 6.1.2, 5.2.28, 6.0.6, 5.1.36, 5.2.10, 5.1.32, 5.2.6, 5.0.38, 5.1.20, 5.1.22, 5.2.16, 6.1.20, 5.0.30, 5.1.12, 7.1.14, 7.2.4, 7.0.12, 7.1.6, 7.0.16, 4.0.24, 4.0, 4.0.0, 4.0.2, 4.0.4, 4.0.6, 4.0.8, 4.0.10, 4.0.12, 4.0.14, 4.0.16, 4.0.18, 4.0.20, 4.0.22, 4.2.0, 4.2.2, 4.2.4, 4.2.6, 4.2.8, 4.2.10, 4.2.12, 4.2.14, 4.2.16, 4.2.18, 4.2.20, 4.3.0, 4.3.2, 4.3.4, 4.3.6
Affected Xen versions
= 4.3.0, 4.3.1, 4.3.2, 4.3.3, 4.3.4, 4.4.0, 4.4.1, 4.4.2, 4.4.3, 4.5.0, 4.5.1, 4.5.2, 4.6.0, 4.6.1, 4.6.2, 4.6.4, 4.6.5
Affected Gnu Glibc versions
< 2.18
Affected Oracle Agile Plm versions
= 9.3.3, 9.3.4, 9.3.5
Affected Oracle Communications Converged Application Server versions
= 5.1, 7.0, 7.1
Affected Oracle Peoplesoft Enterprise Peopletools versions
= 8.56, 8.57, 8.58
Affected Oracle Storagetek Tape Analytics Sw Tool versions
= 2.3
Affected Oracle Tape Library Acsls versions
= 8.5

Vulnerabilities with exploits

Highest CVSS first — 32 of these already have exploit code on Sploitus

CVE-2022-39425
CVSS 10.0 HIGH 2022-10-13FIX AVAILABLE
CVE-2015-8104
CVSS 10.0 CRITICAL 2015-10-23FIX AVAILABLE
CVE-2015-0235 28 exploits
CVSS 10.0 HIGH 2012-02-17FIX AVAILABLE
📄 Qualys Security Advisory - Exim 21Nails Advisory📄 Qualys Security Advisory - GHOST glibc gethostbyname Buffer Overflow
CVE-2019-2725 35 exploits
CVSS 10.0 CRITICAL 2007-04-10FIX AVAILABLE
Exploit for Injection in Oracle Agile_PlmExploit for CVE-2014-7911
CVE-2019-2721 2 exploits
CVSS 8.8 HIGH 2019-04-23FIX AVAILABLE
VirtualBox 6.0.4 r128413 - COM RPC Interface Code Injection Host Privilege Escalation ExploitVirtualBox 6.0.4 r128413 - COM RPC Interface Code Injection Host Privilege Escalation
CVE-2019-14378 4 exploits
CVSS 8.8 HIGH 2019-07-28
Exploit for Use After Free in MicrosoftQEMU - Denial of Service Exploit
CVE-2018-2844 3 exploits
CVSS 8.8 HIGH 2018-04-19FIX AVAILABLE
VirtualBox 5.2.6.r120293 - VM Escape ExploitVirtualBox 5.2.6.r120293 - VM Escape
CVE-2018-2694
CVSS 8.8 HIGH 2018-01-18FIX AVAILABLE
CVE-2018-2698 6 exploits
CVSS 8.8 HIGH 2018-01-16FIX AVAILABLE
Exploit for Incorrect Type Conversion or Cast in Redhat Enterprise_Linux_DesktopOracle VirtualBox Multiple Guest to Host Escape Vulnerabilities(CVE-2018-2698)
CVE-2017-3563 3 exploits
CVSS 8.8 HIGH 2017-04-24FIX AVAILABLE
VirtualBox 5.0.32 r112930 x64 - Windows Process COM Injection Privilege Escalation ExploitVirtualBox 5.0.32 r112930 x64 - Windows Process COM Injection Privilege Escalation Exploit
CVE-2017-3561 3 exploits
CVSS 8.8 HIGH 2017-04-24FIX AVAILABLE
VirtualBox - Environment and ioctl Unprivileged Host User to Host Kernel Privilege Escalation ExploiOracle VM VirtualBox - Environment and ioctl Unprivileged Host User to Host Kernel Privilege Escalation
CVE-2017-10204 5 exploits
CVSS 8.8 HIGH 2017-07-20FIX AVAILABLE
VirtualBox 6.0.4 r128413 - COM RPC Interface Code Injection Host Privilege Escalation ExploitVirtualBox 6.0.4 r128413 - COM RPC Interface Code Injection Host Privilege Escalation
CVE-2017-10129 3 exploits
CVSS 8.8 HIGH 2017-07-20FIX AVAILABLE
VirtualBox: Windows Process DLL UNC Path Signature Bypass EoP(CVE-2017-10129)VirtualBox 5.1.22 - Windows Process DLL UNC Path Signature Bypass Privilege Escalation Exploit
CVE-2017-3576 4 exploits
CVSS 8.8 HIGH 2017-04-24FIX AVAILABLE
Oracle VM VirtualBox 5.1.14 r112924 - Unprivileged Host User to Host Kernel Privilege Escalation via ALSA configVirtualBox Unprivilege Host User To Host Kernel Privilege Escalation Exploit
CVE-2018-3085
CVSS 8.5 HIGH 2018-07-17FIX AVAILABLE
CVE-2017-3558 2 exploits
CVSS 8.5 HIGH 2017-04-24FIX AVAILABLE
VirtualBox - Guest-to-Host Privilege Escalation via Broken Length Handling in slirp Copy ExploitOracle VM VirtualBox - Guest-to-Host Privilege Escalation via Broken Length Handling in slirp Copy
CVE-2021-2264
CVSS 8.4 HIGH 2021-04-20FIX AVAILABLE
CVE-2017-3316 4 exploits
CVSS 8.4 HIGH 2017-01-27FIX AVAILABLE
Oracle VM VirtualBox < 5.0.32 / < 5.1.14 - Privilege Escalation ExploitVirtualBox Privilege Escalation
CVE-2017-3587 1 exploit
CVSS 8.4 HIGH 2017-04-24FIX AVAILABLE
Oracle VirtualBox Guest Additions 5.1.18 - Unprivileged Windows User-Mode Guest Code Double-Free
CVE-2026-21955
CVSS 8.2 HIGH 2026-01-01FIX AVAILABLE
CVE-2023-22098 1 exploit
CVSS 8.2 HIGH 2023-10-17FIX AVAILABLE
Exploit for CVE-2023-22098
CVE-2018-2860 1 exploit
CVSS 8.2 HIGH 2018-04-19FIX AVAILABLE
Exploit for Incorrect Type Conversion or Cast in Redhat Enterprise_Linux_Desktop
CVE-2025-30712
CVSS 8.1 HIGH 2025-04-01
CVE-2017-3575 3 exploits
CVSS 7.9 HIGH 2017-04-24FIX AVAILABLE
Oracle VM VirtualBox - 'virtio-net' Guest-to-Host Out-of-Bounds WriteVirtualBox Guest-To-Host Out-Of-Bounds Write Exploit
CVE-2024-21111 3 exploits
CVSS 7.8 HIGH 2024-04-16FIX AVAILABLE
📄 VirtualBox 7.0.16 Local Privilege Escalation / Race ConditionVirtualBox 7.0.16 - Privilege Escalation
CVE-2023-0464
CVSS 7.8 HIGH 2023-03-08
CVE-2022-42916
CVSS 7.8 HIGH 2022-10-26FIX AVAILABLE
CVE-2018-0732
CVSS 7.8 HIGH 2018-06-12FIX AVAILABLE
CVE-2017-3733 1 exploit
CVSS 7.8 HIGH 2017-01-30FIX AVAILABLE
Git-Vuln-Finder - Finding Potential Software Vulnerabilities From Git Commit Messages
CVE-2016-6304 3 exploits
CVSS 7.8 HIGH 2016-08-29FIX AVAILABLE
Orion Elite Hidden IP Browser Pro 7.9 OpenSSL / Tor / Man-In-The-MiddleOpenSSL OCSP Status Request Extension Unbounded Memory Growth Vulnerability
CVE-2015-7183
CVSS 7.5 HIGH 2015-11-03FIX AVAILABLE
CVE-2019-1543 1 exploit
CVSS 7.4 HIGH 2019-03-06FIX AVAILABLE
Trivy - A Simple And Comprehensive Vulnerability Scanner For Containers, Suitable For CI
CVE-2014-0224 11 exploits
CVSS 7.4 HIGH 1970-01-01FIX AVAILABLE
SSL Labs API ClientOpenSSL Server-Side ChangeCipherSpec Injection Scanner
CVE-2009-3692 6 exploits
CVSS 7.2 HIGH 2009-10-13FIX AVAILABLE
Sun VirtualBox <= 3.0.6 - Privilege EscalationSun VirtualBox <= 3.0.6 privilege escalation
CVE-2008-3431 7 exploits
CVSS 7.2 HIGH 2008-08-05FIX AVAILABLE
Sun xVM VirtualBox < 1.6.4 Privilege Escalation Vulnerability PoCSun xVM VirtualBox &lt; 1.6.4 Privilege Escalation Vulnerability PoC
CVE-2026-21986
CVSS 7.1 HIGH 2026-01-01FIX AVAILABLE
CVE-2018-3055 1 exploit
CVSS 7.1 HIGH 2018-07-17FIX AVAILABLE
Exploit for Incorrect Type Conversion or Cast in Redhat Enterprise_Linux_Desktop
CVE-2014-4261
CVSS 6.9 MEDIUM 2014-07-17FIX AVAILABLE
CVE-2014-0983 10 exploits
CVSS 6.9 MEDIUM 2014-03-28FIX AVAILABLE
VirtualBox 3D Acceleration Virtual Machine EscapeOracle VM VirtualBox 4.3.6 - 3D Acceleration Virtual Machine Escape (Metasploit)
CVE-2009-0876 1 exploit
CVSS 6.9 MEDIUM 2009-03-12
Sun xVM VirtualBox 2.0/2.1 - Local Privilege Escalation
CVE-2017-3736
CVSS 6.8 MEDIUM 2017-11-02FIX AVAILABLE
CVE-2016-5610
CVSS 6.8 MEDIUM 2016-10-25FIX AVAILABLE
CVE-2014-2886
CVSS 6.8 MEDIUM 2014-09-18FIX AVAILABLE
CVE-2017-10235 1 exploit
CVSS 6.7 MEDIUM 2017-07-20FIX AVAILABLE
Exploit for CVE-2017-10235
CVE-2019-10219
CVSS 6.5 MEDIUM 2019-03-27
CVE-2021-2119
CVSS 6.0 MEDIUM 2021-01-20FIX AVAILABLE
CVE-2015-3197 2 exploits
CVSS 5.9 MEDIUM 2016-01-28FIX AVAILABLE
Orion Elite Hidden IP Browser Pro 7.9 OpenSSL / Tor / Man-In-The-MiddleCross-protocol attack on TLS using SSLv2 (DROWN) (CVE-2016-0800)
CVE-2019-2525 2 exploits
CVSS 5.6 MEDIUM 2019-01-16FIX AVAILABLE
Exploit for CVE-2019-2525Exploit for CVE-2019-2525
CVE-2017-5715 11 exploits
CVSS 5.6 MEDIUM 2018-01-03
Exploit for Observable Discrepancy in Intel Atom_CExploit for Observable Discrepancy in Intel Atom_C
CVE-2015-3195 1 exploit
CVSS 5.3 MEDIUM 2015-12-03FIX AVAILABLE
Orion Elite Hidden IP Browser Pro 7.9 OpenSSL / Tor / Man-In-The-Middle