CVE-2026-47053 Oracle Corporation CVE debrief

Who should care

System administrators and users of Oracle VM VirtualBox 7.2.12 should be aware of this vulnerability and take necessary actions to mitigate the risk. This includes reviewing system configurations, applying patches, and monitoring for suspicious activity. Security teams and vulnerability management teams should prioritize this vulnerability based on its CVSS score and potential impact on the organization.

Technical summary

The vulnerability has a CVSS 3.1 Base Score of 5.6 and affects the Core component of Oracle VM VirtualBox. The CVSS Vector is (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. The vulnerability allows a low-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.

Defensive priority

Medium

Recommended defensive actions

• Apply the patch from Oracle as soon as possible
• Restrict access to the Oracle VM VirtualBox infrastructure
• Monitor for suspicious activity
• Implement compensating controls
• Verify the integrity of critical data
• Review system configurations for potential vulnerabilities
• Track exceptions and retest remediated assets

Evidence notes

The CVE record was published on 2026-07-21T22:17:11.020Z and was last modified on 2026-07-27T20:11:23.757Z. The NVD entry is currently Analyzed. This information is based on the supplied source corpus. Defenders should verify the accuracy of this information and review official advisories for the most current details. The vulnerability affects Oracle VM VirtualBox 7.2.12, and its exploitation requires human interaction.

Official resources