CVE-2016-0602

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.14 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Windows Installer. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is an untrusted search path issue that allows local users to gain privileges via a Trojan horse dll in the "application directory."

• http://seclists.org/fulldisclosure/2016/Feb/54
• http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/archive/1/537462/100/0/threaded
• http://www.securitytracker.com/id/1034731
• http://seclists.org/fulldisclosure/2016/Feb/54
• http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/archive/1/537462/100/0/threaded
• http://www.securitytracker.com/id/1034731

Published

Jan 21, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-0596Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier…
• CVE-2016-0597Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier…
• CVE-2016-0598Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier…
• CVE-2016-0599Unspecified vulnerability in Oracle MySQL 5.7.9 allows remot…
• CVE-2016-0600Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier…
• CVE-2016-0601Unspecified vulnerability in Oracle MySQL 5.7.9 allows remot…
• CVE-2016-0603Unspecified vulnerability in the Java SE component in Oracle…
• CVE-2016-0604Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-0605Unspecified vulnerability in Oracle MySQL 5.6.26 and earlier…
• CVE-2016-0606Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier…
• CVE-2016-0607Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier…
• CVE-2016-0608Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier…