A AegiFlow
UNKNOWNKNOWN EXPLOITED

CVE-2008-3431

Oracle VirtualBox Insufficient Input Validation Vulnerability

Published
2022-03-03
Modified
2026-07-31
Sources
cisa-kev

Summary

An input validation vulnerability exists in the VBoxDrv.sys driver of Sun xVM VirtualBox which allows attackers to locally execute arbitrary code.

References

Includes data from the CISA Known Exploited Vulnerabilities catalog.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.