Multiples vulnérabilités dans Oracle Virtualization (16 septembre 2026)
Multiple vulnerabilities have been discovered in Oracle Virtualization, primarily affecting Oracle VM VirtualBox version 7.2.16. These vulnerabilities allow for data integrity compromise, data confidentiality breaches, and remote code execution, alongside denial-of-service attacks. Users are advised to consult the vendor's security advisory for available patches.
Oracle Virtualization has been identified as containing several security vulnerabilities. Specifically, vulnerabilities exist within VirtualBox version 7.2.16. These flaws can lead to data integrity issues, potentially exposing sensitive data. Furthermore, attackers could exploit these vulnerabilities to achieve remote code execution, enabling them to execute arbitrary commands on affected systems. Denial-of-service attacks are also possible. The CERT-FR bulletin details a comprehensive list of CVE identifiers associated with these vulnerabilities, including CVE-2026-87267 through CVE-2026-87285. The vendor recommends reviewing their security advisory for specific remediation steps. The advisory provides a link to the security bulletin: https://www.oracle.com/security-alerts/cspusep2026.html.