Unrated severityNVD Advisory· Published Jul 16, 2015· Updated Jun 17, 2026

CVE-2015-2594

Description

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4.0.32, 4.1.40, 4.2.32, and 4.3.30 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core.

Affected products

Oracle Corporation/VM Virtualbox2 versions
cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*range: >=4.0.0,<4.0.32
- (no CPE)range: <4.0.32 || <4.1.40 || <4.2.32 || <4.3.30
Debian/linux3 versions
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

www.oracle.com/technetwork/topics/security/cpujul2015-2367936.htmlnvdPatchVendor Advisory
lists.opensuse.org/opensuse-updates/2015-08/msg00021.htmlnvdMailing ListThird Party Advisory
www.debian.org/security/2015/dsa-3359nvdThird Party Advisory
www.securityfocus.com/bid/75899nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000