vciy

Oracle Corporation VM VirtualBox: 26 records in one advisory

26 records announced together, published 2019-01-16, every one of them citing the same advisory.

The advisory

Every record in this batch cites http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html. That is the CNA's own reference, held in the index, and it is why these records are on one page.

What the records offer

All 26 records publish a fixed version.

No record in this batch is listed by CISA in held sources.

1 of 26 record names something of its own. For the other 25, held sources say the same thing about each.

Most commonly mapped weakness across the batch: Easily exploitable vulnerability allows low…

What this page does not cover

This batch is 26 of the 157 records that cite the same advisory. The other 131 are different findings announced alongside it.

24 of them are on the sibling batch linked below. The remaining 107 are grouped with nothing and have only their own record pages.

Other batches under the same advisory: oracle-cpujan2019-5072801-7f712644b1

The batch is what one advisory announced. It is not every record sharing this weakness, this product or this mechanism, and nothing here is scoped to any estate.

Listed for shared announcement, not shared vulnerability. Each record here is its own finding with its own page, and fixing one does not address another.

CVE-2019-2446no title heldEasily exploitable vulnerability allows low…
CVE-2019-2448no title heldEasily exploitable vulnerability allows low…
CVE-2019-2450no title heldEasily exploitable vulnerability allows low…
CVE-2019-2451no title heldEasily exploitable vulnerability allows low…
CVE-2019-2500no title heldEasily exploitable vulnerability allows low…
CVE-2019-2501no title heldEasily exploitable vulnerability allows low…
CVE-2019-2504no title heldEasily exploitable vulnerability allows low…
CVE-2019-2505no title heldEasily exploitable vulnerability allows low…
CVE-2019-2506no title heldEasily exploitable vulnerability allows low…
CVE-2019-2508no title heldEasily exploitable vulnerability allows low…
CVE-2019-2509no title heldEasily exploitable vulnerability allows low…
CVE-2019-2511soapEasily exploitable vulnerability allows…
CVE-2019-2520no title heldDifficult to exploit vulnerability allows low…
CVE-2019-2521no title heldDifficult to exploit vulnerability allows low…
CVE-2019-2522no title heldDifficult to exploit vulnerability allows low…
CVE-2019-2523no title heldDifficult to exploit vulnerability allows low…
CVE-2019-2524no title heldEasily exploitable vulnerability allows low…
CVE-2019-2525no title heldDifficult to exploit vulnerability allows low…
CVE-2019-2526no title heldDifficult to exploit vulnerability allows low…
CVE-2019-2527no title heldEasily exploitable vulnerability allows low…
CVE-2019-2548no title heldEasily exploitable vulnerability allows low…
CVE-2019-2552no title heldEasily exploitable vulnerability allows low…
CVE-2019-2553no title heldEasily exploitable vulnerability allows low…
CVE-2019-2554no title heldEasily exploitable vulnerability allows low…
CVE-2019-2555no title heldEasily exploitable vulnerability allows low…
CVE-2019-2556no title heldEasily exploitable vulnerability allows low…

26 records, read from the index as it stood on 2026-09-20. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.