CVE-2018-2836 is a high-severity vulnerability (CVSS 8.2) in Oracle VM VirtualBox, affecting versions prior to 5.1.36 and 5.2.10. A low-privileged attacker with infrastructure logon can exploit this vulnerability, requiring human interaction from a non-attacker, to fully compromise VirtualBox and potentially impact other products. While the vulnerability allows for complete confidentiality, integrity, and availability compromise, there is no known public exploit code, Metasploit modules, or significant community discussion or media coverage, indicating it is not actively exploited.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 5.1.0, < 5.1.36CPE matchmatch criteria | cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:* | ||
>= 5.2.0, < 5.2.10CPE matchmatch criteria | cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:* | ||
< 5.1.36CPE match | cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:* | ||
< 5.2.10CPE match | cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.