The current version of VirtualBox is 7.2.20 (as of 23/09/2026). patchletter checks the official source daily and emails you new releases.
Actively exploited vulnerabilities
The US cybersecurity agency CISA lists this vulnerability in its catalog of Known Exploited Vulnerabilities. What CISA does not carry does not appear in this list — even where it is being exploited.
- CVE-2008-3431Oracle VirtualBox Insufficient Input Validation Vulnerability
8.8 high · locally only, with a basic account · CISA deadline was 24 Mar 22
Source: CISA KEV. The CVE is matched to the product automatically — when in doubt, the linked NVD entry applies.
VirtualBox at a glance
Oracle VirtualBox is a widely used, free desktop virtualization platform for running virtual machines on Windows, macOS and Linux. Oracle ships regular releases plus quarterly Critical Patch Updates that carry security fixes; as software that runs untrusted guest OSes, those fixes matter.
For admins VirtualBox has had notable security advisories, including guest-to-host escape classes, so apply the quarterly security updates promptly — especially where untrusted guests run. Update the base package and the matching Guest Additions and Extension Pack together (mismatches cause problems), and mind the Extension Pack's licensing for commercial use. Take VM snapshots before larger updates. After updating, verify that VMs still boot and networking works. VirtualBox runs with significant privileges — keep it current and source it officially. Track the version and its support status.
Version history & changelog · as detected by patchletter
| Version | Channel | Date | Notes |
|---|---|---|---|
| 7.2.20 | STABLE | 23/09/2026 | – |
| 7.2.18 | STABLE | 16/09/2026 | – |
| 7.2.16 | STABLE | 19/08/2026 | – |
| 7.2.14 | STABLE | 22/07/2026 | – |
| 7.2.12 | STABLE | 08/07/2026 | – |
Frequently asked questions
- What is the latest version of VirtualBox?
- VirtualBox 7.2.20, released 23/09/2026. patchletter checks the vendor's official source daily for new releases.
- Where can I find the VirtualBox release notes?
- The version history above links to the vendor's official release notes where the vendor publishes them. patchletter deliberately stores no vendor full texts.
- How do I get notified about new VirtualBox updates?
- Tick VirtualBox off in the catalogue and leave your address. From then on new versions go out by email — one at a time, or bundled in the daily or weekly digest.
An email as soon as a new VirtualBox version ships
We reconcile the vendor source daily. When a new version appears, it lands in your inbox right away or bundled as a digest. The update email is free and ends with one click. Alerts about vulnerabilities and end of support are part of patchletter Pro.
Embed this badge
The badge shows the current VirtualBox version and keeps it up to date. Anyone may embed it, no account needed.
[](https://patchletter.com/en/software/virtualbox)https://patchletter.com/badge/virtualbox.svgAlso available: ?v=eol (end of support) and ?v=cve (actively exploited).
