[CVE-2026-77178] Oracle VM VirtualBox before 7.2.8 allows guest OS users to cause an out-of-bounds write in the host …

Descripción técnica

Oracle VM VirtualBox before 7.2.8 allows guest OS users to cause an out-of-bounds write in the host OS in pcnetReceiveNoSync in DevPCNet.cpp in the PCNet (Am79C970A) network device model.

Puntuación CVSS

Score: 9.1/10 — Severidad: CRITICAL — Estado NIST: Awaiting Analysis

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Debilidades (CWE)

CWE-787

Fuente oficial

Publicado en NIST NVD.