Actively exploited in the wild
Oracle Solaris Privilege Escalation Vulnerability
Oracle - Solaris · Listed in the CISA KEV since 2022-05-25. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2019-3010
HighCVSS 8.8KEVSummary
Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.0 Base Score 8.8.
Risk Assessment
A low privileged attacker could take over the Oracle Solaris system, potentially leading to confidentiality, integrity, and availability impacts.
Recommendation
Apply the security updates for Oracle Solaris provided by Oracle.
Other vulnerabilities in Oracle Solaris
See all- CVE-2026-87423Medium
Vulnerability in the X Window System component of Oracle Solaris version 11.4. A difficult-to-exploit attack allows a low-privileged attacker with logon to cause unauthorized update, insert or delete access to some data, unauthorized read access to a subset of data, and partial denial of service.
- CVE-2026-87422Low
Vulnerability in Oracle Solaris of Oracle Systems (component: Services). Affects version 11.4. A difficult-to-exploit flaw allows an unauthenticated attacker with logon to the infrastructure to modify some data, requiring user interaction.
- CVE-2026-87421High
Vulnerability in Oracle Solaris (Image Packaging System component) affecting version 11.4. An easily exploitable flaw allows an unauthenticated attacker with HTTP network access to gain unauthorized access to and modify critical data, requiring user interaction.
- CVE-2026-87417High
Vulnerability in Oracle Solaris (Image Packaging System component) affecting version 11.4. An easily exploitable flaw allows an unauthenticated attacker with HTTP network access to gain unauthorized access to critical data.
- CVE-2026-87414Low
Vulnerability in Oracle Solaris (component: Image Packaging System) affecting version 11.4. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via TLS to gain unauthorized update, insert, or delete access to some data, requiring human interaction. CVSS 3.1 Base Score 3.1.
- CVE-2026-87413Medium
Vulnerability in the Filesystems component of Oracle Solaris version 11.4. An easily exploitable attack allows a low-privileged attacker with logon to cause a hang or frequently repeatable crash (complete DoS) of Oracle Solaris.
- CVE-2026-87411Medium
Vulnerability in the Filesystems component of Oracle Solaris version 11.4. An easily exploitable attack allows a low-privileged attacker with logon to cause a hang or frequently repeatable crash (complete DoS) of Oracle Solaris.
- CVE-2014-6524High
Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Kernel.
- CVE-2014-6521High
Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality, integrity, and availability via vectors related to CDE - Power Management Utility.
- CVE-2014-6510High
An unspecified vulnerability in Oracle Solaris 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Power Management Utility.
Original NVD description (English source)
Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS