A heap double-free vulnerability has been discovered in Oracle VirtualBox version 5.1.18 when Guest Additions (and more specifically shared folders) are enabled in the guest operating system.
f9a72132a43c0f4dc96388302410d8cba6377cc6b5879b7d58455004d04006fd