High severity7.0NVD Advisory· Published Apr 15, 2020· Updated Jun 17, 2026

CVE-2020-2913

Description

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.0.20 and prior to 6.1.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Oracle Corporation/VM Virtualboxllm-fuzzy2 versions
<6.0.20, <6.1.6+ 1 more
- (no CPE)range: <6.0.20, <6.1.6
- (no CPE)range: unspecified
osv-coords
pkg:rpm/opensuse/virtualbox&distro=openSUSE%20Leap%2015.1
Range: < 6.0.22-lp151.2.15.1

Patches

Vulnerability mechanics

References

lists.opensuse.org/opensuse-security-announce/2020-07/msg00001.htmlnvdMailing ListThird Party Advisory
security.gentoo.org/glsa/202101-09nvdThird Party Advisory
www.oracle.com/security-alerts/cpuapr2020.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000