CVE-2019-2506

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 3.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N).

• http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html
• http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/106568Third Party Advisory, VDB Entry
• http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html
• http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/106568Third Party Advisory, VDB Entry

Published

Jan 16, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-25054An issue was discovered in the pnet crate before 0.27.2 for …7.5
• CVE-2019-25055An issue was discovered in the libpulse-binding crate before…7.5
• CVE-2019-25056In Bromite through 78.0.3904.130, there are adblock rules in…5.3
• CVE-2019-25057In Corda before 4.1, the meaning of serialized data can be m…7.5
• CVE-2019-25058An issue was discovered in USBGuard before 1.1.0. On systems…7.8
• CVE-2019-25059Artifex Ghostscript through 9.26 mishandles .completefont. N…7.8
• CVE-2019-25060The WPGraphQL WordPress plugin before 0.3.5 doesn't properly…5.3
• CVE-2019-25061The random_password_generator (aka RandomPasswordGenerator) …7.5
• CVE-2019-25062A vulnerability was found in Sricam IP CCTV Camera and class…7.8
• CVE-2019-25063A vulnerability was found in Sricam IP CCTV Camera. It has b…7.8
• CVE-2019-25064A vulnerability was found in CoreHR Core Portal up to 27.0.7…8.8
• CVE-2019-25065A vulnerability was found in OpenNetAdmin 18.1.1. It has bee…9.8