Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 3.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
History

Thu, 05 Dec 2024 15:45:00 +0000

Type Values Removed Values Added
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*

Thu, 07 Nov 2024 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: oracle

Published: 2024-04-16T21:26:34.967Z

Updated: 2024-11-07T16:09:43.943Z

Reserved: 2023-12-07T22:28:10.677Z

Link: CVE-2024-21108

cve-icon Vulnrichment

Updated: 2024-08-01T22:13:42.674Z

cve-icon NVD

Status : Analyzed

Published: 2024-04-16T22:15:32.277

Modified: 2024-12-05T15:15:56.193

Link: CVE-2024-21108

cve-icon Redhat

No data.