CVE-2021-2297

CVE-2021-2297 is a vulnerability affecting Oracle VM VirtualBox versions prior to 6.1.20, specifically within its Core component. This medium-severity vulnerability, with a CVSS 3.1 Base Score of 5.3, requires a highly privileged attacker with logon access to the VirtualBox infrastructure to exploit. Successful exploitation can lead to unauthorized access to critical data or complete access to all VirtualBox-accessible data, primarily impacting confidentiality. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.