Russian Security Expert leaked a critical Virtual Box Zero-day vulnerability online along with its exploit that allows an attacker to gain root/administrator privileges in a guest and escape to a host. The vulnerability can be exploited from guest ring 3 level privilege which is used to exploit the most powerful hypervisor vulnerabilities that allow taking control over the host operating system.

Read full news article on GBHackers