{"cvss":0.0,"datePublished":"2022-03-03","dateUpdated":"2022-03-03","description":"An input validation vulnerability exists in the VBoxDrv.sys driver of Sun xVM VirtualBox which allows attackers to locally execute arbitrary code.","dueDate":"2022-03-24","id":"CVE-2008-3431","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://nvd.nist.gov/vuln/detail/CVE-2008-3431","product":"VirtualBox","requiredAction":"Apply updates per vendor instructions.","severity":"HIGH","source":"cisa_known_exploited","title":"Oracle VirtualBox Insufficient Input Validation Vulnerability","vendor":"Oracle"}