CVE-2019-2679: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core).

Security readout for executives and security teams

CVE-2019-2679 affects Oracle VM VirtualBox before 5.2.28 and 6.0.6. A logged-in, low-privileged attacker on infrastructure running VirtualBox could crash VirtualBox repeatedly and read some VirtualBox-accessible data. This is mainly a host or infrastructure exposure concern, not a remote internet vulnerability based on the provided sources. Exposure is likely where Oracle VM VirtualBox versions prior to 5.2.28 or prior to 6.0.6 run on user-accessible infrastructure. The attacker needs local logon access to the environment where VirtualBox executes. Treat this as high priority for shared workstations, lab hosts, CI systems, and virtualization infrastructure with multiple local users. Prioritize patching where VirtualBox runs on systems accessible to non-administrators or third parties. Mitigation focus: Upgrade Oracle VM VirtualBox to 5.2.28, 6.0.6, or later where applicable.; Apply relevant distribution security updates, including openSUSE updates where applicable.; Restrict local logon access on systems that run VirtualBox..

Prepared

Jun 6, 2026, 21:12 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.