Skip to content
Fencer Intel
low 2.1

CVE-2015-4813 json

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4.0.34, 4.1.42, 4.2.34, 4.3.32…

published 2015-10-21 11 y ago modified 2026-06-17 4 mo ago also EUVD-2015-4830

cvss
2.1
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
0.4%
EPSS 0.4% chance of exploitation in 30 days, percentile 38%
public exploits
0
none known

Summary

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4.0.34, 4.1.42, 4.2.34, 4.3.32, and 5.0.8, when using a Windows guest, allows local users to affect availability via unknown vectors related to Core.

Patch / fix

  • oracle vm_virtualbox 4.0.34, 4.1.42, 4.2.34, 4.3.32, 5.0.8
  • virtualbox Ubuntu 14.04 LTS 4.3.34-dfsg-1+deb8u1ubuntu1.14.04.1

ubuntu advisories UBUNTU-CVE-2015-4813

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • virtualbox openSUSE Tumbleweed 5.1.10-2.5

opensuse advisories openSUSE-SU-2024:10020-1

Exploit prediction

0.44% chance of exploitation in the next 30 days, higher than 38% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
NVD 2.0 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.