Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
2823 articles · 164157 vulns · 37/41 feeds (7d)
← Back to list
7.5
CVE-2026-35275EXPLOITEDPATCHED
oracle · oracle vm virtualbox

CVE-2026-35275: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Shared Folders). The supported

Description

A vulnerability classified as critical has been found in Oracle VM VirtualBox 7.2.8. Impacted is an unknown function of the component Shared Folders. Performing a manipulation results in improper authorization.

Affected Products

VendorProductVersions
oracleoracle vm virtualbox7.2.8

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
oraclevmcert_advisory90%

References

  • https://www.oracle.com/security-alerts/cspujun2026.html(vendor-advisory)

Related News (3 articles)

Tier B
BSI Advisories5h ago
[NEU] [mittel] Oracle VM VirtualBox: Mehrere Schwachstellen
→ No new info (linked only)
Tier C
VulDB10h ago
CVE-2026-35275 | Oracle VM VirtualBox 7.2.8 Shared Folders improper authorization
→ No new info (linked only)
Tier B
CERT-FR14h ago
Multiples vulnérabilités dans Oracle Virtualization (17 juin 2026)
→ No new info (linked only)
CVSS 3.17.5 CRITICAL
VectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
CISA KEV❌ No
Actively exploited✅ Yes
Patch available
https://www.oracle.com/security-alerts/cspujun2026.html
PublishedJun 16, 2026
Last enriched10h agov2
Tags
improper authorization
Trending Score64
Source articles3
Independent3
Info Completeness8/14
Missing: epss, cwe, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-35273EXPKEV
CVE-2026-35273: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mana
Trending: 167
CRITICALCVE-2026-46851EXP
CVE-2026-46851: Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). The
Trending: 64
CRITICALCVE-2026-46914EXP
CVE-2026-46914: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is a
Trending: 64
CRITICALCVE-2026-46849EXP
CVE-2026-46849: Vulnerability in the PeopleSoft Enterprise CS Student Financials product of Oracle PeopleSoft (component: Other). The
Trending: 64
CRITICALCVE-2026-35289EXP
CVE-2026-35289: Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Deployment Package).
Trending: 64

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Jun 16, 2026
Discovered by ZDM
Jun 16, 2026
Actively Exploited
Jun 16, 2026
Patch Available
Jun 16, 2026
Updated: description, severity, activelyExploited, tags
Jun 17, 2026

Version History

v2
Last enriched 10h ago
v2Tier C10h ago

Updated severity to CRITICAL, added new description detailing improper authorization, and marked the vulnerability as actively exploited.

descriptionseverityactivelyExploitedtags
via VulDB
v116h ago

Initial creation