Oracle VM 3

productDE

cpe:/a:oracle:vm:3

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

3critical327high933medium8low

updated 2026-10-27

vulnerabilities (1,458)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2016-6210US	medium5.9	88.9% (100th)	Exploit	no fix	2017-02-13	—
CVE-2023-38408US	critical9.8	79.7% (100th)	Exploit	no fix	2023-07-20	—
CVE-2023-35001US	high7.8	1.54% (75th)	Exploit	no fix	2023-07-05	—
CVE-2022-1015US	medium6.6	1.49% (74th)	Exploit	no fix	2022-04-29	—
CVE-2024-44947US	medium5.5	0.89% (59th)	Exploit	no fix	2024-09-02	—
CVE-2024-44946US	medium5.5	0.86% (58th)	Exploit	no fix	2024-08-31	—
CVE-2019-5489US	medium5.5OT elevated	0.77% (56th)	Exploit	no fix	2019-01-07	—
CVE-2023-4622US	high7.0	0.62% (49th)	Exploit	no fix	2023-09-06	—
CVE-2023-3776US	high7.8	0.51% (43rd)	Exploit	no fix	2023-07-21	—
CVE-2014-3634US	high7.5	7.55% (94th)	—	no fix	2014-11-02	—
CVE-2014-3683US	medium5.0	4.58% (92nd)	—	no fix	2014-11-02	—
CVE-2022-44640US	critical9.8	2.35% (84th)	—	no fix	2022-12-25	—
CVE-2023-31248US	high7.8	1.89% (79th)	—	no fix	2023-07-05	—
CVE-2023-0401US	high7.5	1.85% (79th)	—	no fix	2023-02-08	—
CVE-2023-0217US	high7.5	1.85% (79th)	—	no fix	2023-02-08	—
CVE-2023-0216US	high7.5	1.85% (79th)	—	no fix	2023-02-08	—
CVE-2024-27053US	—	1.65% (76th)	—	no fix	2024-05-01	—
CVE-2024-35960US	—	1.41% (73rd)	—	no fix	2024-05-20	—
CVE-2022-4203US	medium4.9	1.39% (72nd)	—	no fix	2023-02-24	—
CVE-2021-44758US	high7.5	1.33% (71st)	—	no fix	2022-12-26	—
CVE-2024-27405US	—OT elevated	1.30% (70th)	—	no fix	2024-05-17	—
CVE-2024-35955US	—	1.18% (67th)	—	no fix	2024-05-20	—
CVE-2024-27028US	—	1.18% (67th)	—	no fix	2024-05-01	—
CVE-2024-35845US	—	1.17% (67th)	—	no fix	2024-05-17	—
CVE-2022-48748US	—	1.13% (66th)	—	no fix	2024-06-20	—
CVE-2023-0394US	medium5.5OT elevated	1.02% (63rd)	—	no fix	2023-01-26	—
CVE-2024-38573US	—	1.00% (63rd)	—	no fix	2024-06-19	—
CVE-2024-41040US	high7.0	1.00% (63rd)	—	no fix	2024-07-29	—
CVE-2022-41916US	high7.5	1.00% (62nd)	—	no fix	2022-11-15	—
CVE-2024-35857US	—	0.98% (62nd)	—	no fix	2024-05-17	—
CVE-2023-52699US	—	0.97% (62nd)	—	no fix	2024-05-19	—
CVE-2024-27388US	medium5.5	0.96% (61st)	—	no fix	2024-05-01	—
CVE-2022-48788US	high7.8	0.93% (61st)	—	no fix	2024-07-16	—
CVE-2022-48747US	—	0.92% (60th)	—	no fix	2024-06-20	—
CVE-2024-35823US	—	0.92% (60th)	—	no fix	2024-05-17	—
CVE-2024-38541US	—	0.90% (60th)	—	no fix	2024-06-19	—
CVE-2024-40983US	medium5.5	0.88% (59th)	—	no fix	2024-07-12	—
CVE-2024-44985US	high7.8	0.88% (59th)	—	no fix	2024-09-04	—
CVE-2024-41081US	medium5.5	0.87% (59th)	—	no fix	2024-07-29	—
CVE-2024-42145US	medium5.5	0.87% (59th)	—	no fix	2024-07-30	—
CVE-2024-38582US	—	0.86% (58th)	—	no fix	2024-06-19	—
CVE-2024-26690US	—	0.84% (58th)	—	no fix	2024-04-03	—
CVE-2024-26901US	medium5.5	0.83% (57th)	—	no fix	2024-04-17	—
CVE-2024-26731US	—	0.83% (57th)	—	no fix	2024-04-03	—
CVE-2024-38558US	medium5.5	0.82% (57th)	—	no fix	2024-06-19	—
CVE-2023-52696US	—	0.82% (57th)	—	no fix	2024-05-17	—
CVE-2024-38544US	medium6.3	0.81% (57th)	—	no fix	2024-06-19	—
CVE-2024-41048US	medium5.5	0.80% (56th)	—	no fix	2024-07-29	—
CVE-2024-35878US	—	0.79% (56th)	—	no fix	2024-05-19	—
CVE-2024-40923US	medium5.5	0.79% (56th)	—	no fix	2024-07-12	—

showing 50 of 1,458

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-476NULL Pointer Dereference268 CVEs
CWE-20Improper Input Validation230 CVEs
CWE-416Use After Free188 CVEs
CWE-667Improper Locking157 CVEs
CWE-401Missing Release of Memory after Effective Lifetime133 CVEs
CWE-125Out-of-bounds Read98 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer80 CVEs
CWE-399CWE-39980 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)1,458 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan