CVE-2008-3431 Oracle VirtualBox
An input validation vulnerability exists in the VBoxDrv.sys driver of Sun xVM VirtualBox which allows attackers to locally execute arbitrary code.
- CVSS
- not scored
On CISA’s exploited list
Oracle VirtualBox Insufficient Input Validation Vulnerability
- Added
- 2022-03-03
- Federal patch deadline
- 2022-03-24
- Ransomware use
- not known