CVE-2021-2282

CVE-2021-2282 is a vulnerability in Oracle VM VirtualBox versions prior to 6.1.20, specifically affecting the Core component. This easily exploitable vulnerability allows an unauthenticated attacker with logon access to the infrastructure to compromise VirtualBox, potentially leading to unauthorized access to critical or all accessible data. With a CVSS 3.1 Base Score of 7.1 (High), the attack vector is local with low complexity, requiring no user interaction, and primarily impacts confidentiality. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.