Sun Xvm VirtualBox vulnerabilities

2 CVEs affecting Sun Xvm VirtualBox, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-3940, published 2009-11-16.

More from Sun.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2009-0876, published 2009-03-12. Medium severity, CVSS 6.9. EPSS: 0.8% chance of exploitation in the next 30 days. Sun xVM VirtualBox 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, 2.1.2, and 2.1.4r42893 on Linux allows local users to gain privileges via a hardlink attack, which preserves setuid/setgid bits on Linux,…
• CVE-2009-3940, published 2009-11-16. Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days. Unspecified vulnerability in Guest Additions in Sun xVM VirtualBox 1.6.x and 2.0.x before 2.0.12, 2.1.x, and 2.2.x, and Sun VirtualBox before 3.0.10, allows guest OS users to cause a denial of…