VirtualBox

VirtualBox is a type-2 hypervisor running each VM inside a VBoxSVC/VirtualBox process on the host. Guest-to-host escapes target its emulated devices, 3D acceleration, audio, network, and USB, and the Guest Additions integration (shared folders and clipboard over HGCM). It is a frequent research and Pwn2Own target with a broad device surface.

1 min di letturaaggiornato il 7 ott 2026florianamette1 contributore
Chiedi al tuo assistente (MCP)Modifica su GitHub

VirtualBox is Oracle's cross-platform desktop hypervisor. Each VM runs inside a host process (the VirtualBox/VBoxHeadless frontend with VBoxSVC), which emulates the VM's devices, so a guest-to-host escape corrupts that process and runs on the user's host. Its device surface is broad, 3D acceleration, several audio and network models, and USB controllers, and the Guest Additions add shared folders and clipboard/drag-and-drop over the Host-Guest Communication Manager (HGCM), a prominent integration surface. VirtualBox is a recurring research and Pwn2Own target precisely because of that breadth.

bash
# from the guest: emulated devices and Guest Additions
lspci -nn; lsusb; lsmod | grep -i vbox
VBoxControl --version 2>/dev/null         # Guest Additions present

Subtopics#

References#

PrecedenteKnown escape exploitsSuccessiva Guest-to-host escape