CVE-2021-2125

CVE-2021-2125 is a vulnerability in Oracle VM VirtualBox, specifically affecting versions prior to 6.1.18. This flaw allows a high-privileged attacker with logon access to the VirtualBox infrastructure to compromise the virtualization software. Successful exploitation can lead to unauthorized read, update, insert, or delete access to a subset of VirtualBox accessible data. The vulnerability has a CVSS 3.1 Base Score of 4.6 (Medium), indicating low confidentiality and integrity impacts. It is easily exploitable with low attack complexity, requiring high privileges and local access to the system running VirtualBox. While the direct impact is on VirtualBox, attacks could significantly affect other products. Currently, there is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting a low level of public attention.