CVE-2014-6540: Oracle Vm VirtualBox

Low severity, CVSS 1.9. EPSS: 0.4% chance of exploitation in the next 30 days.

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.1.34, before 4.2.26, and before 4.3.14 allows local users to affect availability via vectors related to Graphics driver (WDDM) for Windows guests.

Affected products

• Oracle Vm VirtualBox: up to and including 4.2.24; version 4.2.0 only; version 4.2.2 only; version 4.2.4 only; version 4.2.6 only; version 4.2.8 only; …

Published 2014-10-15. Last modified 2026-06-17.