CVE-2024-21164

CVE-2024-21164 is a low-severity vulnerability affecting Oracle VM VirtualBox versions prior to 7.0.20, specifically within its Core component. An attacker with high privileges and logon access to the VirtualBox infrastructure can exploit this vulnerability, potentially leading to unauthorized read access to a subset of VirtualBox accessible data. While difficult to exploit, successful attacks could impact additional products beyond VirtualBox itself. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage regarding this CVE.