Oracle released VirtualBox 7.2.22 on October 20, 2026, a maintenance release that includes unspecified security-related fixes, coinciding with their October Critical Patch Update. Users of the unsupported VirtualBox 7.1 should migrate to the still-supported 7.2 line, while those on 7.2 are advised to upgrade to 7.2.22 to benefit from the latest fixes. The lack of specific CVE details in the release notes suggests that Oracle is managing security disclosures carefully, possibly to prevent attackers from exploiting unpatched vulnerabilities. Additionally, users with ARM virtual machines should note that saved states and snapshots from version 7.1 are incompatible with the new version, necessitating a shutdown of those VMs before upgrading

VirtualBox 7.2.22 Releases with Security Fixes

VirtualBox 7.2.22 shipped October 20, 2026, described by Oracle only as "a maintenance release with security-related fixes," with no CVE list published. It landed the same day as Oracle's October Critical Patch Update, strongly indicating it's Oracle's VirtualBox contribution to this quarter's security cycle. VirtualBox 7.1 has been unsupported since March 31, 2026, so those users should migrate to the still-supported 7.2 line. 7.2 users should jump to 7.2.22 to pick up the latest fixes, and ARM VM owners should shut down saved machines before upgrading due to a 7.1-to-7.2 snapshot incompatibility.

VirtualBox 7.2.22 Releases with Security Fixes @ Linux Compatible