This vulnerability exists in the core component of Oracle VM VirtualBox version 7.2.6. It permits an attacker who has logged onto the host system with a high‑privileged account to trigger a partial denial of service of the VirtualBox service without requiring user interaction. The flaw causes an availability degradation, does not affect confidentiality or integrity, and is rooted in improper access control (CWE‑284).

Oracle VM VirtualBox version 7.2.6 is the only documented affected product; no other releases or components are listed.

The CVSS v3.1 Base Score of 2.3 indicates low severity, while the EPSS score of <1% reflects an extremely low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires a local attacker with high‑privilege access to the host, which confines the threat to environments where such accounts exist. Though the risk is low, the availability impact can disrupt operations and warrants timely remediation.