What’s Vulnerable › Vulnerabilities

CVE-2026-77178

• Severity: critical (CVSS 9.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-06 · updated 2026-10-06
• Weakness: CWE-787

Description

Oracle VM VirtualBox before 7.2.8 allows guest OS users to cause an out-of-bounds write in the host OS in pcnetReceiveNoSync in DevPCNet.cpp in the PCNet (Am79C970A) network device model.

References

• https://gist.github.com/entropy1337/cd0d5b368445d20c43aca2590b313892
• https://www.oracle.com/
• https://www.virtualbox.org/wiki/Download_Old_Builds_7_0

Get alerted when CVE-2026-77178 or the next vulnerability affects your stack