Unrated severityNVD Advisory· Published Jan 21, 2016· Updated Jun 17, 2026

CVE-2016-0602

Description

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.14 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Windows Installer. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is an untrusted search path issue that allows local users to gain privileges via a Trojan horse dll in the "application directory."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Oracle Corporation/VM Virtualbox
cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*
Range: <=5.0.12
Oracle Corporation/Virtualboxllm-fuzzy
Range: <5.0.14

Patches

Vulnerability mechanics

References

www.oracle.com/technetwork/topics/security/cpujan2016-2367955.htmlnvdPatchVendor Advisory
seclists.org/fulldisclosure/2016/Feb/54nvd
www.securityfocus.com/archive/1/537462/100/0/threadednvd
www.securitytracker.com/id/1034731nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000