CVE-2019-2723: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core).

Security readout for executives and security teams

CVE-2019-2723 is a high-impact Oracle VM VirtualBox Core flaw. An attacker who already has low-privileged logon access where VirtualBox runs could take over VirtualBox, affecting confidentiality, integrity, and availability. It is not a remote internet-only issue, but it matters on shared workstations, lab hosts, build systems, and servers running old VirtualBox versions. Exposure is most likely on endpoints, developer machines, virtualization hosts, CI systems, or lab infrastructure still running VirtualBox before 5.2.28 or 6.0.6, especially where untrusted or many users can log in locally. Treat this as a high-priority hygiene and exposure-reduction issue where VirtualBox exists on shared or sensitive systems. It requires local access, but successful exploitation can fully compromise VirtualBox and affect additional products. Mitigation focus: Upgrade VirtualBox to 5.2.28, 6.0.6, or later supported releases.; Apply applicable Oracle Critical Patch Update guidance for April 2019.; Use vendor package updates where VirtualBox is installed through a distribution..

Prepared

Jun 6, 2026, 21:12 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.