Login Request a demo
SO
Product
Solaris
by Oracle · last CVE Jul 21, 2026
On CISA KEVExploited in the wildRansomware-linked
558
CVEs
7
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities558In the news2Timeline
Severity mix
Critical 17High 85Medium 110Low 35
Severity
All severities500Critical17High85Medium110Low35
Exploitation
On CISA KEV7Exploited in the wild7
Watch

Add Solaris to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-14871
In wildKEV
10.0
80%
Oct 21
Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability
Affected: 10 before 11.1; 9
CVE-2019-3010
In wildKEV
8.8
13%
Oct 16
Oracle Solaris Privilege Escalation Vulnerability
Affected: 11
CVE-2015-4495
In wildKEV
8.8
69%
Aug 8
Mozilla Firefox Security Feature Bypass Vulnerability
Affected: 11.3
CVE-2008-2992
RansomwareIn wildKEV
7.8
100%
Nov 4
Adobe Reader and Acrobat Input Validation Vulnerability
Affected: 10
CVE-2015-5477
In wildKEV
7.5
100%
Jul 29
ISC BIND Data Processing Errors Vulnerability
Affected: 10; 11.2
CVE-2016-3715
In wildKEV
5.5
75%
May 5
ImageMagick Arbitrary File Deletion Vulnerability
Affected: 10; 11.3
CVE-2016-3718
In wildKEV
5.5
76%
May 5
ImageMagick Server-Side Request Forgery (SSRF) Vulnerability
Affected: 10; 11.3
CVE-2026-46978
10.0
0%
Jun 16
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Remote Administration Daemon)
Affected: 11.4
CVE-2017-3623
10.0
23%
Apr 24
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel RPC)
Affected: All versions, or not specified
CVE-2015-8104
10.0
2%
Nov 16
The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB…
Affected: 11.3
CVE-2020-10108
9.8
4%
Mar 12
In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability
Affected: 10; 11
CVE-2017-3632
9.8
4%
Aug 8
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: CDE Calendar)
Affected: 10; 11
CVE-2016-5841
9.8
13%
Dec 13
Integer overflow in MagickCore/profile.c in ImageMagick before 7.0.2-1 allows remote attackers to cause a denial of service (segmentation fault) or possibly execute arbitrary code…
Affected: 10.0; 11.3
CVE-2016-5691
9.8
6%
Dec 13
The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact by leveraging lack of validation of (1) pixel.red, (2)…
Affected: 11.3
CVE-2016-5690
9.8
6%
Dec 13
The ReadDCMImage function in DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact via vectors involving the for…
Affected: 11.3
CVE-2016-5689
9.8
5%
Dec 13
The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact by leveraging lack of NULL pointer checks
Affected: 11.3
CVE-2016-5687
9.8
5%
Dec 13
The VerticalFilter function in the DDS coder in ImageMagick before 6.9.4-3 and 7.x before 7.0.1-4 allows remote attackers to have unspecified impact via a crafted DDS file, which…
Affected: 11.3
CVE-2016-2177
9.8
45%
Jun 20
OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and…
Affected: 10; 11.3
CVE-2016-5118
9.8
50%
Jun 10
The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a…
Affected: 10; 11.3
CVE-2016-0693
9.8
3%
Apr 21
Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to the PAM LDAP…
Affected: 10; 11.3
CVE-2016-1283
9.8
8%
Jan 3
The pcre_compile2 function in pcre_compile.c in PCRE 8.38 mishandles the…
Affected: 11.3
CVE-2001-0249
9.8
20%
Jun 18
Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which uses glob to…
Affected: 8
CVE-2017-3510
9.6
2%
Apr 24
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel Zones virtualized NIC driver)
Affected: 11.3
CVE-2020-2944
8.8
2%
Apr 15
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment)
Affected: 10; 11
CVE-2020-2696
8.8
1%
Jan 15
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment)
Affected: 10
CVE-2019-2844
8.8
0%
Jul 23
Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: LDAP Client Tools)
Affected: 11.4
CVE-2019-2832
8.8
0%
Jul 23
Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Common Desktop Environment)
Affected: 10
CVE-2016-6491
8.8
5%
Dec 13
Buffer overflow in the Get8BIMProperty function in MagickCore/property.c in ImageMagick before 6.9.5-4 and 7.x before 7.0.2-6 allows remote attackers to cause a denial of service…
Affected: 10.0; 11.3
CVE-2016-4971
8.8
46%
Jun 30
GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource
Affected: 10; 11.3
CVE-2015-0973
8.8
4%
Jan 18
Buffer overflow in the png_read_IDAT_data function in pngrutil.c in libpng before 1.5.21 and 1.6.x before 1.6.16 allows context-dependent attackers to execute arbitrary code via…
Affected: 11.2
CVE-2024-20999
8.2
0%
Apr 16
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Zones)
Affected: 11
CVE-2022-21446
8.2
2%
Apr 19
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility)
Affected: 11
CVE-2017-3564
8.2
0%
Apr 24
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: RBAC)
Affected: 11.3
CVE-2019-9579
8.1
1%
Dec 26
An issue was discovered in Illumos in Nexenta NexentaStor 4.0.5 and 5.1.2, and other products
Affected: 11
CVE-2018-3273
8.1
3%
Oct 17
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Remote Administration Daemon (RAD))
Affected: 11.3
CVE-2018-2928
8.1
2%
Jul 18
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: RAD)
Affected: 11.3
CVE-2016-5688
8.1
5%
Dec 13
The WPG parser in ImageMagick before 6.9.4-4 and 7.x before 7.0.1-5, when a memory limit is set, allows remote attackers to have unspecified impact via vectors related to the…
Affected: 11.3
CVE-2016-5387
8.1
56%
Jul 19
The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY…
Affected: 11.3
CVE-2016-0778
8.1
21%
Jan 14
The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certain proxy and forward options are…
Affected: 11.3
CVE-2017-3565
7.9
0%
Apr 24
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: RBAC)
Affected: 11.3
CVE-2026-60661
7.8
0%
Jul 21
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems)
Affected: 11.4
CVE-2024-21059
7.8
0%
Apr 16
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility)
Affected: 11
CVE-2023-22023
7.8
0%
Jul 18
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Device Driver Interface)
Affected: 11
CVE-2023-21948
7.8
0%
Apr 18
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Core)
Affected: 10
CVE-2021-2167
7.8
0%
Apr 22
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment)
Affected: 10
CVE-2020-2927
7.8
0%
Apr 15
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment)
Affected: 10; 11
CVE-2020-2851
7.8
1%
Apr 15
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment)
Affected: 10; 11
CVE-2018-2892
7.8
2%
Jul 18
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Availability Suite Service)
Affected: 10.0; 11.3
CVE-2017-3629
7.8
5%
Jun 22
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel)
Affected: 10; 11
CVE-2017-3622
7.8
5%
Apr 24
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Common Desktop Environment (CDE))
Affected: 10
Page 1 of 10 · 500 total
12…10
The 500 most important CVEs for this product (exploited first, then by severity)