Unrated severityNVD Advisory· Published Oct 6, 2026

CVE-2026-77178

Description

Oracle VM VirtualBox before 7.2.8 allows guest OS users to cause an out-of-bounds write in the host OS in pcnetReceiveNoSync in DevPCNet.cpp in the PCNet (Am79C970A) network device model.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Oracle Corporation/Virtualboxllm-fuzzy
Range: <7.2.8
Oracle Corporation/VM Virtualboxllm-fuzzy
Range: <7.2.8

Patches

Vulnerability mechanics

References

gist.github.com/entropy1337/cd0d5b368445d20c43aca2590b313892nvd
www.oracle.comnvd
www.virtualbox.org/wiki/Download_Old_Builds_7_0nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000