Product by Oracle

    Oracle Virtualization

    46 known vulnerabilities in Oracle Virtualization (Oracle), 2 of them actively exploited (CISA KEV).

    Key figures

    46

    Vulnerabilities

    2

    Actively exploited (KEV)

    0

    Used by ransomware

    6

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Oracle Virtualization (Oracle)
    CriticalCVE-2014-6271

    GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

    In CISA KEValso in 66 other products

    		9.8
    CriticalCVE-2014-7169

    GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

    In CISA KEValso in 66 other products

    		9.8
    CriticalCVE-2017-7525

    FasterXML Jackson-databind: Incomplete List of Disallowed Inputs

    also in 21 other products

    		9.8
    CriticalCVE-2018-8088

    Qos Slf4j: security vulnerability

    also in 13 other products

    		9.8
    CriticalCVE-2019-9636

    Python Software Foundation CPython: Information Disclosure

    also in 16 other products

    		9.8
    CriticalCVE-2015-7512

    QEMU: Buffer Overflow

    also in 9 other products

    		9.0
    HighCVE-2015-1779

    QEMU: Denial of Service

    also in 11 other products

    		8.6
    MediumCVE-2018-3639

    Intel Multiple: security vulnerability

    also in 252 other products

    		5.5
    MediumCVE-2019-1559

    0-byte record padding oracle

    also in 80 other products

    		5.9
    MediumCVE-2018-10237

    Google Guava: Deserialization of Untrusted Data

    also in 17 other products

    		5.9
    HighCVE-2018-1000180

    Oracle Business Process Management Suite: security vulnerability

    also in 19 other products

    		7.5
    MediumCVE-2021-3634

    Libssh: Out-of-bounds Write

    also in 8 other products

    		6.5
    Not ratedCVE-2015-0235

    GNU glibc: Heap-Based Buffer Overflow

    also in 18 other products

    		—
    MediumCVE-2020-10775

    Ovirt-engine: User Interface (UI) Misrepresentation of Critical Information

    also in 1 other product

    		5.3
    Not ratedCVE-2014-0230

    Apache Tomcat: Denial of Service

    also in 1 other product

    		—
    Not ratedCVE-2015-5165

    Red Hat OpenStack: security vulnerability

    also in 23 other products

    		—
    HighCVE-2026-87322

    Oracle VM VirtualBox: security vulnerability

    also in 1 other product

    		8.4
    HighCVE-2016-3710

    QEMU: Code Execution

    also in 15 other products

    		8.8
    HighCVE-2026-87301

    Oracle VM VirtualBox: security vulnerability

    also in 1 other product

    		8.4
    HighCVE-2026-101598

    Oracle VM VirtualBox: security vulnerability

    also in 1 other product

    		7.8
    HighCVE-2026-101599

    Oracle VM VirtualBox: security vulnerability

    also in 1 other product

    		7.5
    HighCVE-2016-5126

    QEMU: Heap-Based Buffer Overflow

    also in 12 other products

    		7.8
    MediumCVE-2026-87303

    Oracle VM VirtualBox: security vulnerability

    also in 1 other product

    		5.9
    MediumCVE-2026-87311

    Oracle VM VirtualBox: security vulnerability

    also in 1 other product

    		5.6
    Not ratedCVE-2015-2581

    Oracle Virtualization: security vulnerability

    		—

    All vulnerabilities in search

    News

    All products by Oracle