critical9.1
CVE-2026-77178
Oracle VM VirtualBox before 7.2.8 allows guest OS users to cause an out-of-bounds write in the host OS in pcnetReceiveNoSync in DevPCNet.cpp in the PCNet (Am79…
Impact
Oracle VM VirtualBox before 7.2.8 allows guest OS users to cause an out-of-bounds write in the host OS in pcnetReceiveNoSync in DevPCNet.cpp in the PCNet (Am79C970A) network device model.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oracle | Oracle VM VirtualBox | before 7.2.8 |
Versions were read from the advisory text. No structured product data has been published for this record yet.