Multiples vulnérabilités dans Oracle Virtualization (23 juillet 2026)
Multiple vulnerabilities have been discovered in Oracle Virtualization, allowing an attacker to compromise data confidentiality, data integrity, and cause a denial of service. These vulnerabilities affect Oracle VM VirtualBox versions 7.2.12 and 7.2.8, and are addressed through updates available in the vendor's security bulletin. The bulletin provides links to the security alerts and CVE records.
Oracle Virtualization has been identified as containing several security vulnerabilities. These flaws can lead to data compromise, data integrity issues, and service disruptions. The vulnerabilities are detailed in the vendor’s security bulletin, which can be found at https://www.oracle.com/security-alerts/cpujul2026. The bulletin lists a comprehensive set of CVE identifiers, including CVE-2026-47041, CVE-2026-47043, CVE-2026-47044, CVE-2026-47050, CVE-2026-47053, CVE-2026-47054, CVE-2026-47055, CVE-2026-47062, CVE-2026-60150, CVE-2026-60155, CVE-2026-60158, CVE-2026-60159, CVE-2026-60160, and CVE-2026-60161. Affected products include Oracle VM VirtualBox versions 7.2.12 and 7.2.8. The vendor recommends reviewing the security bulletin for detailed information and applying the necessary updates.