CVE-2024-21106

Summary

CVE-2024-21106 is a vulnerability affecting Oracle VM VirtualBox, a component of Oracle Virtualization, prior to version 7.0.16. This easily exploitable issue allows a low-privileged attacker with access to the infrastructure where Oracle VM VirtualBox runs to compromise the product. The impact of successful attacks can extend beyond Oracle VM VirtualBox, potentially affecting other products as well. The vulnerability grants an attacker the ability to cause a hang or frequent crashes, resulting in a denial-of-service (DoS) situation, with a CVSS 3.1 Base Score of 6.5 for availability impacts.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.