CVE-2014-4228

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.1.34, 4.2.26, and 4.3.12 allows local users to affect confidentiality, integrity, and availability via vectors related to Graphics driver (WDDM) for Windows guests.

Published: Jul 17, 2014
Updated: Nov 9, 2025
CVE: CVE-2014-4228
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.4
AV:L/AC:M/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
oracle / vm_virtualbox	4.1.4	4.1.4.x
oracle / vm_virtualbox	4.1.12	4.1.12.x
oracle / vm_virtualbox	4.1.6	4.1.6.x
oracle / vm_virtualbox	4.1.10	4.1.10.x
oracle / vm_virtualbox	4.1.28	4.1.28.x
oracle / vm_virtualbox	4.1.22	4.1.22.x
oracle / vm_virtualbox	4.1.18	4.1.18.x
oracle / vm_virtualbox	4.1.16	4.1.16.x
oracle / vm_virtualbox	4.1.26	4.1.26.x
oracle / vm_virtualbox	4.1.8	4.1.8.x
oracle / vm_virtualbox	4.1.2	4.1.2.x
oracle / vm_virtualbox	4.1.0	4.1.0.x
oracle / vm_virtualbox	4.1.20	4.1.20.x
oracle / vm_virtualbox	4.1.24	4.1.24.x
oracle / vm_virtualbox	4.1.30	4.1.30.x
oracle / vm_virtualbox	4.1.14	4.1.14.x
oracle / vm_virtualbox	-	4.1.32.x
oracle / vm_virtualbox	4.3.2	4.3.2.x
oracle / vm_virtualbox	4.3.8	4.3.8.x
oracle / vm_virtualbox	4.3.0	4.3.0.x
oracle / vm_virtualbox	4.3.4	4.3.4.x
oracle / vm_virtualbox	4.3.6	4.3.6.x
oracle / vm_virtualbox	-	4.3.10.x
oracle / vm_virtualbox	4.2.0	4.2.0.x
oracle / vm_virtualbox	4.2.4	4.2.4.x
oracle / vm_virtualbox	4.2.14	4.2.14.x
oracle / vm_virtualbox	4.2.22	4.2.22.x
oracle / vm_virtualbox	-	4.2.24.x
oracle / vm_virtualbox	4.2.12	4.2.12.x
oracle / vm_virtualbox	4.2.2	4.2.2.x
oracle / vm_virtualbox	4.2.6	4.2.6.x
oracle / vm_virtualbox	4.2.18	4.2.18.x
oracle / vm_virtualbox	4.2.8	4.2.8.x
oracle / vm_virtualbox	4.2.16	4.2.16.x
oracle / vm_virtualbox	4.2.20	4.2.20.x
oracle / vm_virtualbox	4.2.10	4.2.10.x

Vulnerability Database

313,825

CVE-2014-4228

Deep Security Visibility Without the Complexity