All apps
O
Oracle VirtualBox
VirtualizationCross-platform type-2 hypervisor for running virtual machines on desktops
Latest versions
Stable
WindowsmacOSLinux
7.2.20Actively exploited
0
CISA KEV · 1 lifetime
Affecting latest
0
v7.2.20
Known CVEs
483
across all versions, as matched by PemSync
Last checked
21 Oct 2026, 4:42
The latest tracked version (7.2.20) is not affected by any matched vulnerability — all 483 recorded CVEs are fixed in versions you're past.
| CVE | Severity | EPSS pct | Status | Score source | |
|---|---|---|---|---|---|
CVE-2019-2725Exploited | CRITICAL 9.8 | 100% | Latest not affected | NVD | 26 Apr 2019 |
| — | 5% | Latest not affected | — | 15 Sep 2026 | |
| — | 4% | Latest not affected | — | 15 Sep 2026 | |
| — | 5% | Latest not affected | — | 15 Sep 2026 | |
| — | 5% | Latest not affected | — | 15 Sep 2026 | |
| — | 5% | Latest not affected | — | 15 Sep 2026 | |
| — | 4% | Latest not affected | — | 15 Sep 2026 | |
| — | 4% | Latest not affected | — | 15 Sep 2026 | |
| — | 4% | Latest not affected | — | 15 Sep 2026 | |
| — | 39% | Latest not affected | — | 15 Sep 2026 | |
| — | 2% | Latest not affected | — | 15 Sep 2026 | |
| — | 5% | Latest not affected | — | 15 Sep 2026 | |
| — | 2% | Latest not affected | — | 15 Sep 2026 | |
| — | 7% | Latest not affected | — | 15 Sep 2026 | |
| — | 5% | Latest not affected | — | 15 Sep 2026 | |
| — | 5% | Latest not affected | — | 15 Sep 2026 | |
| — | 5% | Latest not affected | — | 15 Sep 2026 | |
| — | 5% | Latest not affected | — | 15 Sep 2026 | |
| — | 5% | Latest not affected | — | 15 Sep 2026 | |
| — | 26% | Latest not affected | — | 15 Sep 2026 | |
| — | 2% | Latest not affected | — | 18 Aug 2026 | |
| — | 5% | Latest not affected | — | 18 Aug 2026 | |
| — | 4% | Latest not affected | — | 18 Aug 2026 | |
| — | 5% | Latest not affected | — | 18 Aug 2026 | |
| — | 5% | Latest not affected | — | 18 Aug 2026 |
Showing 1–25 of 483
Page 1 of 20
PemSync reports known, cataloged exploited vulnerabilities (CISA KEV) and published CVEs. It is not a zero-day detection or threat-intelligence system — a vulnerability may be exploited before it appears here. Absence of data does not mean an app is secure.