Noticias ALEJANDRO Posted April 24, 2024 Posted April 24, 2024 One of the best-known programs for creating virtual machines is VirtualBox. This open source software is owned by Oracle and is maintained by the Apache company. It is a very intuitive and easy-to-use software thanks to which anyone can create a virtual machine in seconds to test different operating systems, programs or configurations without putting their main system at risk. And most importantly, without paying a single euro for the license. Just yesterday, a new, quite serious security flaw was announced that endangered users who used virtual machines generated with VirtualBox. This security flaw affects all versions of the program prior to 7.0.16. Any attacker can take advantage of this vulnerability to escalate privileges within any system that has this program installed until reaching the maximum permission level: SYSTEM. This is a very easy flaw to exploit, because the exploit (which is already available on the Internet) is very easy to use, and also because the only requirement is that the victim have the program installed. Furthermore, it targets Windows users directly (it doesn't seem to affect macOS and Linux), and exposes the entire system when it manages to exploit them. Click
Recommended Posts