How many CVEs does oracle vm virtualbox have?

oracle vm virtualbox has 483 published CVE records since 2011.

How many oracle vm virtualbox CVEs are in CISA KEV?

Yes — 1 of oracle vm virtualbox's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for oracle vm virtualbox vulnerabilities?

Yes — 24 of oracle vm virtualbox's CVEs have a known public exploit.

Which versions of oracle vm virtualbox are affected?

336 distinct oracle vm virtualbox versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in oracle vm virtualbox CVEs?

oracle vm virtualbox's CVEs most often map to these CWE weakness types: CWE-284 (Improper Access Control), CWE-269 (Improper Privilege Management), CWE-400 (Uncontrolled Resource Consumption), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor).

How many critical oracle vm virtualbox vulnerabilities are there?

oracle vm virtualbox has 5 critical and 222 high-severity CVEs.

What is the average severity of oracle vm virtualbox CVEs?

The average CVSS base score across oracle vm virtualbox's scored CVEs is 6.5.

oracle vm virtualbox Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every oracle vm virtualbox version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

prior to 5.0.324 CVEs
prior to 5.1.144 CVEs
prior to 5.2.402 CVEs
prior to 6.0.202 CVEs
prior to 6.1.62 CVEs

Version ranges

< 5.2.2425 CVEs
< 5.2.4425 CVEs
< 6.0.225 CVEs
< 6.0.2425 CVEs
< 6.1.1225 CVEs
6.0.0 <= v < 6.0.2425 CVEs
6.0.0 <= v <= 6.0.025 CVEs
6.1.0 <= v < 6.1.1225 CVEs
< 5.2.3621 CVEs
< 6.1.2021 CVEs
6.0.0 <= v < 6.0.1621 CVEs
7.2.14 <= v <= 7.2.1421 CVEs
< 6.0.1620 CVEs
6.1.0 <= v < 6.1.220 CVEs
< 6.1.219 CVEs
7.2.16 <= v <= 7.2.1619 CVEs
4.2.0 <= v <= 4.2.018 CVEs
5.2.0 <= v < 5.2.3618 CVEs
6.1.0 <= v < 6.1.618 CVEs
< 6.1.1817 CVEs
4.1.0 <= v <= 4.1.017 CVEs
4.2.10 <= v <= 4.2.1017 CVEs
4.2.12 <= v <= 4.2.1217 CVEs
4.2.14 <= v <= 4.2.1417 CVEs
4.2.2 <= v <= 4.2.217 CVEs
4.2.4 <= v <= 4.2.417 CVEs
4.2.6 <= v <= 4.2.617 CVEs
4.2.8 <= v <= 4.2.817 CVEs
< 6.0.2016 CVEs
< 6.1.616 CVEs
4.1.10 <= v <= 4.1.1016 CVEs
4.1.12 <= v <= 4.1.1216 CVEs
4.1.14 <= v <= 4.1.1416 CVEs
4.1.16 <= v <= 4.1.1616 CVEs
4.1.18 <= v <= 4.1.1816 CVEs
4.1.2 <= v <= 4.1.216 CVEs
4.1.20 <= v <= 4.1.2016 CVEs
4.1.22 <= v <= 4.1.2216 CVEs
4.1.24 <= v <= 4.1.2416 CVEs
4.1.4 <= v <= 4.1.416 CVEs
4.1.6 <= v <= 4.1.616 CVEs
4.1.8 <= v <= 4.1.816 CVEs
4.2.16 <= v <= 4.2.1616 CVEs
< 5.2.4015 CVEs
4.0 <= v <= 4.015 CVEs
4.1.26 <= v <= 4.1.2615 CVEs
6.0.0 <= v < 6.0.2015 CVEs
7.2.12 <= v <= 7.2.1215 CVEs
<= 5.1.2214 CVEs
4.3.0 <= v <= 4.3.014 CVEs
7.1.14 <= v <= 7.1.1414 CVEs
7.2.4 <= v <= 7.2.414 CVEs
< 5.2.2013 CVEs
< 5.2.3213 CVEs
< 6.0.1013 CVEs
< 7.0.1613 CVEs
3.2.0 <= v <= 3.2.013 CVEs
3.2.10 <= v <= 3.2.1013 CVEs
3.2.12 <= v <= 3.2.1213 CVEs
3.2.14 <= v <= 3.2.1413 CVEs
3.2.2 <= v <= 3.2.213 CVEs
3.2.4 <= v <= 3.2.413 CVEs
3.2.6 <= v <= 3.2.613 CVEs
3.2.8 <= v <= 3.2.813 CVEs
4.0.0 <= v <= 4.0.013 CVEs
4.0.10 <= v <= 4.0.1013 CVEs
4.0.12 <= v <= 4.0.1213 CVEs
4.0.14 <= v <= 4.0.1413 CVEs
4.0.16 <= v <= 4.0.1613 CVEs
4.0.2 <= v <= 4.0.213 CVEs
4.0.4 <= v <= 4.0.413 CVEs
4.0.6 <= v <= 4.0.613 CVEs
4.0.8 <= v <= 4.0.813 CVEs
6.0.0 <= v < 6.0.1013 CVEs
< 5.2.2812 CVEs
< 6.0.612 CVEs
3.2.16 <= v <= 3.2.1612 CVEs
4.0.18 <= v <= 4.0.1812 CVEs
4.2.18 <= v <= 4.2.1812 CVEs
6.0.0 <= v < 6.0.612 CVEs
4.2.20 <= v <= 4.2.2011 CVEs
5.2.0 <= v < 5.2.611 CVEs
7.2.8 <= v <= 7.2.811 CVEs
< 5.1.3210 CVEs
< 5.2.3410 CVEs
< 6.0.1410 CVEs
< 6.1.4410 CVEs
< 7.0.810 CVEs
4.1.28 <= v <= 4.1.2810 CVEs
4.3.2 <= v <= 4.3.210 CVEs
5.1.0 <= v < 5.1.3210 CVEs
5.1.0 <= v < 5.1.3610 CVEs
5.2.0 <= v < 5.2.1010 CVEs
5.2.0 <= v < 5.2.3410 CVEs
6.0.0 <= v < 6.0.1410 CVEs
7.0.0 <= v < 7.0.810 CVEs
< 5.1.369 CVEs
< 5.2.109 CVEs
< 5.2.169 CVEs
< 5.2.69 CVEs
4.1.30 <= v <= 4.1.309 CVEs
4.2.22 <= v <= 4.2.229 CVEs
4.3.4 <= v <= 4.3.49 CVEs
4.3.6 <= v <= 4.3.69 CVEs
7.1.12 <= v <= 7.1.129 CVEs
7.2.2 <= v <= 7.2.29 CVEs
7.2.6 <= v <= 7.2.69 CVEs
< 6.1.408 CVEs
5.0.0 <= v < 5.2.328 CVEs
< 6.1.167 CVEs
<= 4.1.327 CVEs
<= 4.2.247 CVEs
3.2 <= v <= 3.27 CVEs
3.2.18 <= v <= 3.2.187 CVEs
3.2.20 <= v <= 3.2.207 CVEs
4.0.20 <= v <= 4.0.207 CVEs
4.0.22 <= v <= 4.0.227 CVEs
4.3.8 <= v <= 4.3.87 CVEs
5.0.0 <= v < 5.0.387 CVEs
5.1.0 <= v < 5.1.207 CVEs
7.1.10 <= v <= 7.1.107 CVEs
< 6.1.426 CVEs
< 7.0.66 CVEs
7.0.0 <= v < 7.0.66 CVEs
< 6.1.285 CVEs
< 6.1.345 CVEs
<= 3.2.185 CVEs
<= 3.2.225 CVEs
<= 4.0.205 CVEs
<= 4.0.245 CVEs
<= 4.1.285 CVEs
<= 4.3.105 CVEs
<= 4.3.185 CVEs
5.0.0 <= v < 5.0.285 CVEs
5.1.0 <= v < 5.1.85 CVEs
< 5.1.304 CVEs
< 6.1.244 CVEs
<= 4.2.184 CVEs
<= 4.3.24 CVEs
5.1.12 <= v <= 5.1.124 CVEs
7.0.0 <= v <= 7.0.224 CVEs
< 6.1.323 CVEs
< 6.1.463 CVEs
< 7.0.103 CVEs
< 7.0.123 CVEs
< 7.0.203 CVEs
<= 5.1.283 CVEs
5.0.0 <= v < 5.0.143 CVEs
5.0.30 <= v <= 5.0.303 CVEs
6.0.0 <= v < 6.1.463 CVEs
7.0.0 <= v < 7.0.103 CVEs
7.0.0 <= v < 7.0.123 CVEs
7.1.0 <= v <= 7.1.23 CVEs
7.1.6 <= v <= 7.1.63 CVEs
< 6.0.02 CVEs
< 6.1.362 CVEs
< 6.1.382 CVEs
<= 4.3.122 CVEs
3.0 <= v <= 3.02 CVEs
3.1 <= v <= 3.12 CVEs
3.2.22 <= v <= 3.2.222 CVEs
4.0.0 <= v < 4.0.342 CVEs
4.0.0 <= v < 4.3.362 CVEs
4.0.0 <= v <= 4.0.342 CVEs
4.0.24 <= v <= 4.0.242 CVEs
4.0.26 <= v <= 4.0.262 CVEs
4.1 <= v <= 4.12 CVEs
4.1.0 <= v < 4.1.422 CVEs
4.1.0 <= v <= 4.1.422 CVEs
4.1.32 <= v <= 4.1.322 CVEs
4.1.34 <= v <= 4.1.342 CVEs
4.2.0 <= v < 4.2.342 CVEs
4.2.0 <= v <= 4.2.342 CVEs
4.2.24 <= v <= 4.2.242 CVEs
4.2.26 <= v <= 4.2.262 CVEs
4.3.0 <= v < 4.3.322 CVEs
4.3.0 <= v <= 4.3.352 CVEs
4.3.10 <= v <= 4.3.102 CVEs
5.0.0 <= v < 5.0.82 CVEs
5.0.0 <= v <= 5.0.132 CVEs
7.0.0 <= v < 7.0.242 CVEs
7.1.0 <= v < 7.1.62 CVEs
< 4.3.361 CVE
< 5.1.241 CVE
< 5.2.221 CVE
< 5.2.261 CVE
< 6.0.41 CVE
<= 3.2.161 CVE
<= 3.2.241 CVE
<= 4.0.181 CVE
<= 4.1.261 CVE
<= 4.1.301 CVE
<= 4.2.161 CVE
<= 4.2.201 CVE
<= 4.3.41 CVE
<= 5.0.121 CVE
<= 5.0.201 CVE
<= 5.0.241 CVE
<= 5.0.321 CVE
<= 5.1.21 CVE
3.0.0 <= v <= 3.0.01 CVE
3.0.10 <= v <= 3.0.101 CVE
3.0.12 <= v <= 3.0.121 CVE
3.0.14 <= v <= 3.0.141 CVE
3.0.2 <= v <= 3.0.21 CVE
3.0.4 <= v <= 3.0.41 CVE
3.0.6 <= v <= 3.0.61 CVE
3.0.8 <= v <= 3.0.81 CVE
3.1.0 <= v <= 3.1.01 CVE
3.1.2 <= v <= 3.1.21 CVE
3.1.4 <= v <= 3.1.41 CVE
3.1.6 <= v <= 3.1.61 CVE
3.1.8 <= v <= 3.1.81 CVE
3.2.0 <= v < 3.2.241 CVE
3.2.24 <= v <= 3.2.241 CVE
4.0 <= v < 4.0.261 CVE
4.0.0 <= v < 4.0.321 CVE
4.0.29 <= v <= 4.0.291 CVE
4.1.0 <= v < 4.1.341 CVE
4.1.0 <= v < 4.1.401 CVE
4.1.37 <= v <= 4.1.371 CVE
4.2.0 <= v < 4.2.261 CVE
4.2.0 <= v < 4.2.321 CVE
4.2.29 <= v <= 4.2.291 CVE
4.3.0 <= v < 4.3.141 CVE
4.3.0 <= v < 4.3.301 CVE
4.3.0 <= v <= 4.3.291 CVE
4.3.25 <= v <= 4.3.251 CVE
4.6 <= v <= 4.61 CVE
4.61 <= v <= 4.611 CVE
4.62 <= v <= 4.621 CVE
4.63 <= v <= 4.631 CVE
4.7 <= v <= 4.71 CVE
5.0.0 <= v < 5.0.321 CVE
5.0.0 <= v < 5.2.241 CVE
5.0.0 <= v <= 5.0.361 CVE
5.0.0 <= v <= 5.0.81 CVE
5.0.16 <= v <= 5.0.161 CVE
5.0.18 <= v <= 5.0.181 CVE
5.0.27 <= v <= 5.0.271 CVE
5.1.0 <= v < 5.1.141 CVE
5.1.0 <= v <= 5.1.01 CVE
5.1.0 <= v <= 5.1.181 CVE
5.1.10 <= v <= 5.1.101 CVE
5.1.14 <= v <= 5.1.141 CVE
5.1.2 <= v <= 5.1.21 CVE
5.1.28 <= v <= 5.1.281 CVE
5.1.4 <= v <= 5.1.41 CVE
5.1.6 <= v <= 5.1.61 CVE
5.1.7 <= v <= 5.1.71 CVE
5.1.8 <= v <= 5.1.81 CVE
5.2.36 <= v <= 5.2.361 CVE
6.0.0 <= v < 6.0.41 CVE
6.1.0 <= v < 6.1.341 CVE
7.0.0 <= v < 7.0.221 CVE
7.1.0 <= v < 7.1.21 CVE
7.1.4 <= v <= 7.1.41 CVE

Fixed in

5.2.2426 CVEs
5.2.4425 CVEs
6.0.225 CVEs
6.0.2425 CVEs
6.1.1225 CVEs
5.2.3621 CVEs
6.0.1621 CVEs
6.1.2021 CVEs
6.1.220 CVEs
6.0.2018 CVEs
6.1.618 CVEs
6.1.1817 CVEs
5.2.4015 CVEs
5.2.2013 CVEs

Find a version

483 CVEs

Sort

Medium vulnerability · 2026-09-15
CVE-2026-87285
Patch
CWE-400
Medium · CVSS 6.0
EPSS 0.2% (5th pct)2026-09-15
Low vulnerability · 2026-09-15
CVE-2026-87284
Patch
CWE-284
Low · CVSS 3.2
EPSS 0.2% (4th pct)2026-09-15
Medium vulnerability · 2026-09-15
CVE-2026-87283
Patch
CWE-400
Medium · CVSS 6.0
EPSS 0.2% (5th pct)2026-09-15
Medium vulnerability · 2026-09-15
CVE-2026-87282
Patch
CWE-400
Medium · CVSS 6.0
EPSS 0.2% (5th pct)2026-09-15
Low vulnerability · 2026-09-15
CVE-2026-87281
Patch
CWE-284
Low · CVSS 3.2
EPSS 0.2% (5th pct)2026-09-15
Medium vulnerability · 2026-09-15
CVE-2026-87280
Patch
CWE-284
Medium · CVSS 4.2
EPSS 0.1% (4th pct)2026-09-15
Medium vulnerability · 2026-09-15
CVE-2026-87279
Patch
CWE-400
Medium · CVSS 6.1
EPSS 0.2% (4th pct)2026-09-15
Medium vulnerability · 2026-09-15
CVE-2026-87278
Patch
CWE-284
Medium · CVSS 6.1
EPSS 0.2% (4th pct)2026-09-15
High vulnerability · 2026-09-15
CVE-2026-87277
Patch
CWE-400
High · CVSS 7.5
EPSS 0.5% (39th pct)2026-09-15
High vulnerability · 2026-09-15
CVE-2026-87276
Patch
CWE-284
High · CVSS 7.5
EPSS 0.1% (2th pct)2026-09-15
Medium vulnerability · 2026-09-15
CVE-2026-87275
Patch
CWE-284
Medium · CVSS 4.6
EPSS 0.2% (5th pct)2026-09-15
Medium vulnerability · 2026-09-15
CVE-2026-87274
Patch
CWE-400
Medium · CVSS 4.4
EPSS 0.1% (2th pct)2026-09-15
High vulnerability · 2026-09-15
CVE-2026-87273
Patch
CWE-269
High · CVSS 8.6
EPSS 0.2% (7th pct)2026-09-15
High vulnerability · 2026-09-15
CVE-2026-87272
Patch
CWE-269
High · CVSS 7.8
EPSS 0.2% (5th pct)2026-09-15
High vulnerability · 2026-09-15
CVE-2026-87271
Patch
CWE-269
High · CVSS 7.8
EPSS 0.2% (5th pct)2026-09-15
High vulnerability · 2026-09-15
CVE-2026-87270
Patch
CWE-269
High · CVSS 7.8
EPSS 0.2% (5th pct)2026-09-15
High vulnerability · 2026-09-15
CVE-2026-87269
Patch
CWE-269
High · CVSS 7.8
EPSS 0.2% (5th pct)2026-09-15
High vulnerability · 2026-09-15
CVE-2026-87268
Patch
CWE-269
High · CVSS 7.8
EPSS 0.2% (5th pct)2026-09-15
Medium vulnerability · 2026-09-15
CVE-2026-87267
Patch
CWE-400
Medium · CVSS 5.3
EPSS 0.3% (25th pct)2026-09-15
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...
CVE-2026-71151
Patch
CWE-284
Medium · CVSS 5.6
EPSS 0.1% (2th pct)2026-08-18
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...
CVE-2026-71141
Patch
CWE-284
High · CVSS 7.7
EPSS 0.2% (5th pct)2026-08-18
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...
CVE-2026-71140
Patch
CWE-284
Low · CVSS 3.4
EPSS 0.2% (4th pct)2026-08-18
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...
CVE-2026-71139
Patch
CWE-770
Medium · CVSS 4.4
EPSS 0.2% (5th pct)2026-08-18
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...
CVE-2026-71138
Patch
CWE-284
High · CVSS 7.3
EPSS 0.2% (5th pct)2026-08-18
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...
CVE-2026-71137
Patch
CWE-284
Medium · CVSS 6.0
EPSS 0.2% (4th pct)2026-08-18
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...
CVE-2026-71136
Patch
CWE-284
High · CVSS 7.3
EPSS 0.2% (5th pct)2026-08-18
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...
CVE-2026-71135
Patch
CWE-284
Medium · CVSS 6.0
EPSS 0.2% (4th pct)2026-08-18
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...
CVE-2026-71134
Patch
CWE-284
Medium · CVSS 5.7
EPSS 0.2% (4th pct)2026-08-18
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...
CVE-2026-71132
Patch
CWE-284
Medium · CVSS 5.3
EPSS 0.1% (3th pct)2026-08-18
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...
CVE-2026-71131
Patch
CWE-284
High · CVSS 8.6
EPSS 0.2% (7th pct)2026-08-18

Showing 30 of 483

oracle vm virtualbox Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Specific versions

Version ranges

Fixed in

Common weakness types

Disclosure activity by year

Other oracle products

Frequently asked questions

References

Track oracle vm virtualbox vulnerabilities