CVE-2021-2280: 
VirtualBox vulnerability analysis and mitigation

A vulnerability was identified in Oracle VM VirtualBox's Core component, tracked as CVE-2021-2280. The vulnerability affects versions prior to 6.1.20. This security issue was discovered and reported by ChenNan of Chaitin Security Research Lab (Oracle CPU).

The vulnerability is classified as easily exploitable and allows unauthenticated attackers with logon access to the infrastructure where Oracle VM VirtualBox executes to compromise the system. The vulnerability has a CVSS 3.1 Base Score of 7.1, indicating high severity with confidentiality impacts (NVD).

Successful exploitation of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data (Oracle CPU).

The vulnerability is considered easily exploitable by an unauthenticated attacker who has logon access to the infrastructure where Oracle VM VirtualBox executes. While the vulnerability exists in Oracle VM VirtualBox, attacks may significantly impact additional products (NVD).

Oracle has released version 6.1.20 to address this vulnerability. Users are strongly advised to upgrade to this version or later to mitigate the security risk (Gentoo Security).