Oracle Solaris vulnerabilities
40 known CVE vulnerabilities in Oracle Solaris, translated and rated.
- CVE-2026-87423Medium
Vulnerability in the X Window System component of Oracle Solaris version 11.4. A difficult-to-exploit attack allows a low-privileged attacker with logon to cause unauthorized update, insert or delete access to some data, unauthorized read access to a subset of data, and partial denial of service.
- CVE-2026-87422Low
Vulnerability in Oracle Solaris of Oracle Systems (component: Services). Affects version 11.4. A difficult-to-exploit flaw allows an unauthenticated attacker with logon to the infrastructure to modify some data, requiring user interaction.
- CVE-2026-87421High
Vulnerability in Oracle Solaris (Image Packaging System component) affecting version 11.4. An easily exploitable flaw allows an unauthenticated attacker with HTTP network access to gain unauthorized access to and modify critical data, requiring user interaction.
- CVE-2026-87417High
Vulnerability in Oracle Solaris (Image Packaging System component) affecting version 11.4. An easily exploitable flaw allows an unauthenticated attacker with HTTP network access to gain unauthorized access to critical data.
- CVE-2026-87414Low
Vulnerability in Oracle Solaris (component: Image Packaging System) affecting version 11.4. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via TLS to gain unauthorized update, insert, or delete access to some data, requiring human interaction. CVSS 3.1 Base Score 3.1.
- CVE-2026-87413Medium
Vulnerability in the Filesystems component of Oracle Solaris version 11.4. An easily exploitable attack allows a low-privileged attacker with logon to cause a hang or frequently repeatable crash (complete DoS) of Oracle Solaris.
- CVE-2026-87411Medium
Vulnerability in the Filesystems component of Oracle Solaris version 11.4. An easily exploitable attack allows a low-privileged attacker with logon to cause a hang or frequently repeatable crash (complete DoS) of Oracle Solaris.
- CVE-2014-6524High
Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Kernel.
- CVE-2014-6521High
Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality, integrity, and availability via vectors related to CDE - Power Management Utility.
- CVE-2014-6510High
An unspecified vulnerability in Oracle Solaris 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Power Management Utility.
- CVE-2026-60432Critical
Vulnerability in Oracle Solaris (component Image Packaging System) affecting versions 11.3 and 11.4. An unauthenticated attacker with network access via HTTP can easily compromise the product and take it over. CVSS 3.1 Base Score is 9.8 with confidentiality, integrity and availability impacts.
- CVE-2026-101537Critical
Vulnerability in Oracle Solaris (component: Utility) affecting version 11.4. An unauthenticated attacker with network access via TCP can easily exploit it to take over Oracle Solaris. CVSS 3.1 Base Score is 9.8.
- CVE-2020-14871CriticalActively exploited
Vulnerability in the Pluggable authentication module of Oracle Solaris affecting versions 10 and 11. An unauthenticated attacker with network access via multiple protocols can easily exploit it and take over the system; it is not exploitable on Solaris 11.1 and later or ZFSSA 8.7 and later.
- CVE-2019-3010HighActively exploited
Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.0 Base Score 8.8.
- CVE-2026-91537High
Vulnerability in Oracle Solaris (version 11.4) allows a low-privileged attacker with logon to the infrastructure to take over the system. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts).
- CVE-2026-91348High
Vulnerability in Oracle Solaris (component Utility) versions 11.3 and 11.4. An easily exploitable local attack allows an unauthenticated attacker with logon to the infrastructure to take over the system.
- CVE-2026-91336Medium
Vulnerability in the Utility component of Oracle Solaris 11.4. A low-privileged attacker with logon access can create, delete, or modify critical data, and attacks may significantly impact additional products.
- CVE-2026-91324Medium
Vulnerability in the Libraries component of Oracle Solaris 11.4. An unauthenticated attacker with local logon, requiring user interaction, can cause a hang or repeatable crash (complete DoS) of Solaris.
- CVE-2026-91256High
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services) affecting version 11.4. A low privileged attacker with network access via HTTP can cause a hang or frequently repeatable crash (complete DoS) and unauthorized read access to a subset of data.
- CVE-2026-91255High
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel) affecting version 11.4. An unauthenticated attacker with network access via HTTP can cause a hang or frequently repeatable crash (complete DoS).
- CVE-2026-91254High
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel) affecting version 11.4. An unauthenticated attacker with network access via HTTP can cause a hang or frequently repeatable crash (complete DoS).
- CVE-2026-91253High
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel) affecting version 11.4. A low privileged attacker with local logon to the infrastructure can exploit it to take over Oracle Solaris.
- CVE-2026-91252High
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services) affecting version 11.4. An unauthenticated attacker with network access via HTTP can cause a hang or frequently repeatable crash (complete DoS) and unauthorized read access to a subset of data.
- CVE-2026-91249Low
Vulnerability in Oracle Solaris of Oracle Systems (component: Libraries). Affects version 11.4. An easily exploitable flaw allows a low-privileged attacker with logon to the infrastructure to gain unauthorized read access to a subset of data.
- CVE-2026-91244Medium
Vulnerability in Oracle Solaris (Services component) version 11.4, difficult to exploit, allows a low-privileged attacker logged into the infrastructure to cause a hang or frequently repeatable crash (complete DOS).
- CVE-2026-91242High
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Plugins) affecting version 11.4. A high privileged attacker with local logon can exploit it with human interaction to gain unauthorized creation, deletion or modification access to critical data and complete access to all accessible data, with scope change impacting additional products.
- CVE-2026-91209Medium
Vulnerability in Oracle Solaris (X Window System component) version 11.4, difficult to exploit, allows a low-privileged attacker logged into the infrastructure to update, insert, or delete and read a subset of data and cause partial denial of service. It requires human interaction.
- CVE-2026-91208Medium
Vulnerability in the Services component of Oracle Solaris version 11.4. A difficult-to-exploit attack allows an unauthenticated attacker with logon to the infrastructure where Oracle Solaris executes to cause a hang or frequently repeatable crash (complete DoS) of Oracle Solaris.
- CVE-2026-60662High
Vulnerability in the Oracle Solaris product (component: Services) affecting version 11.4. An easily exploitable flaw allows a low-privileged attacker with logon access to the infrastructure to compromise Oracle Solaris.
- CVE-2026-60453Medium
Vulnerability in Oracle Solaris (X Window System component) affecting version 11.4. An easily exploitable flaw allows a logged-in low-privileged attacker to perform unauthorized updates, inserts or deletes, read a subset of data, and cause a partial denial of service.
- CVE-2026-47025High
Vulnerability in the Oracle Solaris product (component: Utility) affecting versions 11.3 and 11.4. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise Oracle Solaris.
- CVE-2026-61202High
In Oracle Solaris (Utility component), a difficult-to-exploit vulnerability allows a local low-privileged attacker to unauthorizedly create, delete, or modify critical data and access all Solaris data. The vulnerability affects additional products (scope change).
- CVE-2026-61052Medium
In Oracle Solaris (component Filesystems) version 11.4, an easily exploitable vulnerability allows a low-privileged attacker with logon to the infrastructure where Oracle Solaris executes to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. CVSS 3.1 Base Score 5.5 (Availability impacts).
- CVE-2026-60834High
Vulnerability in Oracle Solaris product of Oracle Systems, component Utility. Affects version 11.4. A difficult-to-exploit vulnerability allows a low-privileged attacker with network access via RAD to gain unauthorized access to critical data and partial ability to update, insert, or delete it. Attacks may significantly impact additional products (scope change).
- CVE-2026-60833High
A vulnerability in Oracle Solaris (component: Utility) in version 11.4. A difficult-to-exploit vulnerability allows a low privileged attacker with local access to compromise Oracle Solaris (CVSS 7.0).
- CVE-2026-60661High
Vulnerability in Oracle Solaris (Filesystems component) allows a low-privileged attacker with local access to take over the system. Attacks may impact additional products (scope change).
- CVE-2026-60659High
Vulnerability in Oracle Solaris (component: Filesystems) version 11.4. A low-privileged attacker with local access can unauthorized create, delete, or modify critical data and cause a complete denial of service (DOS).
- CVE-2026-34281Medium
Vulnerability in Oracle Solaris (component: Kernel) affecting version 11.4. An easily exploitable flaw allows a low-privileged attacker with logon to the infrastructure to cause a hang or frequently repeatable crash (complete DoS) of Solaris.
- CVE-2025-53070Medium
Vulnerability in Oracle Solaris 11, Filesystem component. It requires high privileges and user interaction but can lead to a hang or frequently repeatable crash (complete DoS).
- CVE-2025-53068Medium
Vulnerability in Oracle Solaris 11, Kernel component. A low-privileged attacker with local access can cause a hang or frequently repeatable crash (complete DoS).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

