CVE-2025-30719: 
VirtualBox vulnerability analysis and mitigation

A vulnerability has been identified in Oracle VM VirtualBox version 7.1.6, tracked as CVE-2025-30719. This vulnerability allows a low-privileged attacker with logon access to the infrastructure where Oracle VM VirtualBox executes to compromise the system. The vulnerability was disclosed on April 15, 2025, as part of Oracle's Critical Patch Update (Oracle CPU).

The vulnerability affects the Core component of Oracle VM VirtualBox and is considered easily exploitable. It has been assigned a CVSS 3.1 Base Score of 6.1, indicating a medium severity level. The CVSS vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H, which indicates local access vector, low attack complexity, low privileges required, no user interaction needed, unchanged scope, low confidentiality impact, no integrity impact, and high availability impact (NVD).

Successful exploitation of this vulnerability can result in two primary impacts: unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox, and unauthorized read access to a subset of Oracle VM VirtualBox accessible data (Oracle CPU).

Oracle has released a security patch for this vulnerability as part of their April 2025 Critical Patch Update. Users are strongly advised to apply the security patch as soon as possible to address this vulnerability. The patch is available for Oracle VM VirtualBox version 7.1.6 (Oracle CPU).