PULSE
EN
FEED
ransomn0n reclama a Company #75 · US · Not Foundransomn0n reclama a Company #74 · US · Not Foundransomn0n reclama a Evolution Spine / All Labs · Healthcareransomincransom reclama a fairfeelegalservices.com · US · Professional Servicesransomincransom reclama a verveba.com \ www.att.com · US · Technologyransomincransom reclama a www.coopecaja.fi.cr · CR · Financial Servicesransomincransom reclama a nowaszkola.com · PL · Educationransomqilin reclama a Keio Corporation · JP · Transportationransomqilin reclama a Kemlows Diecasting Products Limited · GB · Manufacturingransomqilin reclama a Telcoe Federal Credit Union · US · Financial Servicesransomwallstreet reclama a TGM Manufacturing, Inc · US · Manufacturingransomqilin reclama a Segres Systec · ES · Technologyransomqilin reclama a Shield Wall Systems of Florida · US · Government & Defenseransomqilin reclama a The Excalibur Group · US · Otherransomn0n reclama a Company #75 · US · Not Foundransomn0n reclama a Company #74 · US · Not Foundransomn0n reclama a Evolution Spine / All Labs · Healthcareransomincransom reclama a fairfeelegalservices.com · US · Professional Servicesransomincransom reclama a verveba.com \ www.att.com · US · Technologyransomincransom reclama a www.coopecaja.fi.cr · CR · Financial Servicesransomincransom reclama a nowaszkola.com · PL · Educationransomqilin reclama a Keio Corporation · JP · Transportationransomqilin reclama a Kemlows Diecasting Products Limited · GB · Manufacturingransomqilin reclama a Telcoe Federal Credit Union · US · Financial Servicesransomwallstreet reclama a TGM Manufacturing, Inc · US · Manufacturingransomqilin reclama a Segres Systec · ES · Technologyransomqilin reclama a Shield Wall Systems of Florida · US · Government & Defenseransomqilin reclama a The Excalibur Group · US · Other
← Todos los CVEs
CVE Watch—

CVE-2008-3431

Oracle VirtualBox Insufficient Input Validation Vulnerability

CVSS

—

Sin CVSS

EPSS

6.9%

p94

KEV

SÍ

3 mar 2022

Exploit Today

78

0-100

Publicado: — · Última mod.: —

EPSS · 30d
6.9%EPSS · 30 días6.9%
2026-09-172026-10-15
Ficha del catálogo KEV

Producto

Oracle / VirtualBox

Vulnerabilidad

Oracle VirtualBox Insufficient Input Validation Vulnerability

Añadido a KEV

3 mar 2022

Remediar antes de

24 mar 2022

Uso conocido en ransomware

No

Descripción resumida

An input validation vulnerability exists in the VBoxDrv.sys driver of Sun xVM VirtualBox which allows attackers to locally execute arbitrary code.

Acción requerida

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2008-3431

CVEs relacionados

Sin CVEs relacionados por CWE o producto.