CVE-2016-0678

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization...

6.7 MediumFix available

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.18 allows local users to affect confidentiality, integrity, and availability via vectors related to Core.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: High
Privileges needed: Low
User interaction: Required

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.38%Down 0.6 points since Feb 4, 2022

What each source reports

NVD Score used 6.7

Record: CVE-2016-0678
CVSS 3.0: 6.7 MediumCVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0: 4.1 MediumAV:L/AC:M/Au:S/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2016-0678
Updated: 2026-11-02

EUVDEUVD-2016-0713 No score

Record: EUVD-2016-0713
Updated: 2026-11-03

GitHub AdvisoriesGHSA-j5xh-5qj3-35x6 6.7

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization...

Record: GHSA-j5xh-5qj3-35x6
CVSS 3.0: 6.7 MediumCVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2016-0678 6.7

Record: UBUNTU-CVE-2016-0678
CVSS 3.0: 6.7 MediumCVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVMGASA-2016-0226 No score

Updated virtualbox packages fix security vulnerability

This update provides virtualbox 5.0.20 maintenance release, and fixes the following security issue:

For other fixes in this update, see the referenced changelog.

Record: MGASA-2016-0226
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10020-1 No score

python-virtualbox-5.1.10-2.5 on GA media

These are all security issues fixed in the python-virtualbox-5.1.10-2.5 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10020-1
Updated: 2026-11-02

Affected products

oracle vm virtualbox

Affected packages

Affected packages
Package	Affected	Fixed
`kmod-vboxadditions` Mageia:5	before 5.0.20-3.mga5	5.0.20-3.mga5
`kmod-virtualbox` Mageia:5	before 5.0.20-3.mga5	5.0.20-3.mga5
`virtualbox` Mageia:5	before 5.0.20-1.1.mga5	5.0.20-1.1.mga5
`virtualbox` openSUSE:Tumbleweed From an advisory covering 19 CVEs	before 5.1.10-2.5	5.1.10-2.5

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	affected
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2016-0678 is a medium vulnerability (CVSS 6.7) in Oracle Vm Virtualbox, published April 21, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 32nd percentile. Fixed in kmod-vboxadditions 5.0.20-3.mga5.

References

Show 24 moreShow less