← Vulnerability feed

Vulnerability record · CVE-2012-0111 · published 18 January 2012

CVE-2012-0111: Oracle virtualization vulnerability

Oracle · Virtualization

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization 4.1 allows local users to affect confidentiality and integrity via unknown vectors related to Shared Folders.

3.6 CVSS 2.0 Low EPSS 0.40% · top 65.7%
3.6CVSS 2.0 base score
0.40%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
12References
16 Jun 2026Last modified by NVD

Description

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization 4.1 allows local users to affect confidentiality and integrity via unknown vectors related to Shared Folders.

AV:L/AC:L/Au:N/C:P/I:P/A:N

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://lists.opensuse.org/opensuse-updates/2012-10/msg00041.html
http://secunia.com/advisories/48755
http://secunia.com/advisories/50897
http://security.gentoo.org/glsa/glsa-201204-01.xml
http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16722
http://lists.opensuse.org/opensuse-updates/2012-10/msg00041.html
http://secunia.com/advisories/48755
http://secunia.com/advisories/50897
http://security.gentoo.org/glsa/glsa-201204-01.xml
http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16722

Track CVE-2012-0111 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2019-2725Oracle WebLogic Server Web Services deserialization RCEOracle WebLogic Server's Web Services subcomponent contains an injection flaw (CWE-74) that allows unauthenticated remote code execution over HTTP. I…KEVEPSS 100%analysed10.0CVE-2015-8104Xen vulnerabilityThe KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic o…EPSS 2.5%10.0CVE-2015-0235glibc gethostbyname heap buffer overflow (GHOST)CVE-2015-0235 is a heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2 and other 2.x versions before 2.18. It is reach…EPSS 95%analysed9.1CVE-2016-5605Oracle vm virtualbox improper access control vulnerabilityUnspecified vulnerability in the Oracle VM VirtualBox component before 5.1.4 in Oracle Virtualization allows remote attackers to affect confidentiali…EPSS 2.4%9.0CVE-2018-3294Oracle vm virtualbox vulnerabilityVulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to…EPSS 2.7%8.8CVE-2024-21114Oracle vm virtualbox improper access control vulnerabilityVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.1…EPSS 0.39%8.8CVE-2024-21115Oracle vm virtualbox improper access control vulnerabilityVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.1…EPSS 0.45%8.8CVE-2024-21113Oracle vm virtualbox improper access control vulnerabilityVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.1…EPSS 0.39%

Source: NIST National Vulnerability Database (record CVE-2012-0111), CISA KEV, FIRST EPSS (scores of 2026-11-14). This page is refreshed as NVD updates the record.