As cited
Copy frozen at (site build).
vulnerabilities
NCSC-2026-0383 [1.00] [M/H] Kwetsbaarheden verholpen in Oracle VM VirtualBox
Oracle patched 19 vulnerabilities in Oracle VM VirtualBox on September 17, 2026, affecting local and remote access. One vulnerability (CVE-2026-87277, CVSS 7.5) is exploitable remotely via RDP without authentication and can disrupt system availability, while CVE-2026-87273 (CVSS 8.6) requires local access and user interaction but impacts confidentiality, integrity, and availability. Most flaws require local access, user interaction, or prior authentication rights, and none are rated critical.
Why it matters: VirtualBox administrators and organizations running virtualized environments need to apply these patches, particularly CVE-2026-87277 and CVE-2026-87273, to prevent remote denial of service and high-impact local compromise of guest and host systems.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
NCSC-2026-0383 [1.00] [M/H] Vulnerabilities patched in Oracle VM VirtualBox
Oracle patched 19 vulnerabilities in Oracle VM VirtualBox on September 17, 2026, affecting local and remote access. One vulnerability (CVE-2026-87277, CVSS 7.5) is exploitable remotely via RDP without authentication and can disrupt system availability, while CVE-2026-87273 (CVSS 8.6) requires local access and user interaction but impacts confidentiality, integrity, and availability. Most flaws require local access, user interaction, or prior authentication rights, and none are rated critical.
Why it matters: VirtualBox administrators and organizations running virtualized environments need to apply these patches, particularly CVE-2026-87277 and CVE-2026-87273, to prevent remote denial of service and high-impact local compromise of guest and host systems.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
NCSC-2026-0383 Vulnerabilities patched in Oracle VM VirtualBox
Oracle patched 19 vulnerabilities in Oracle VM VirtualBox on September 17, 2026, affecting local and remote access. One vulnerability (CVE-2026-87277, CVSS 7.5) is exploitable remotely via RDP without authentication and can disrupt system availability, while CVE-2026-87273 (CVSS 8.6) requires local access and user interaction but impacts confidentiality, integrity, and availability. Most flaws require local access, user interaction, or prior authentication rights, and none are rated critical.
Why it matters: VirtualBox administrators and organizations running virtualized environments need to apply these patches, particularly CVE-2026-87277 and CVE-2026-87273, to prevent remote denial of service and high-impact local compromise of guest and host systems.
- Source published
- First seen by Cybersecurity Tracker