CVE-2026-77178Published
Oracle VM VirtualBox before 7.2.8 allows guest OS users to cause an out-of-bounds write in the host OS in pcnetReceiveNoSync in DevPCNet.cpp in the PCNet (Am79C970A) network device model.
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-77178 · Microsoft / collected KEV context
cve-program · CVE-2026-77178
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.