Login Request a demo
SO
Product
Solaris
by Oracle · last CVE Jul 21, 2026
On CISA KEVExploited in the wildRansomware-linked
558
CVEs
7
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities558In the news2Timeline
Severity mix
Critical 17High 85Medium 110Low 35
Severity
All severities500Critical17High85Medium110Low35
Exploitation
On CISA KEV7Exploited in the wild7
Watch

Add Solaris to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-2334
7.8
15%
Dec 13
Heap-based buffer overflow in the NArchive::NHfs::CHandler::ExtractZlibFile method in 7zip before 16.00 and p7zip allows remote attackers to execute arbitrary code via a crafted…
Affected: All versions, or not specified
CVE-2016-5544
7.8
0%
Oct 25
Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect confidentiality, integrity, and availability via vectors related to Kernel/X86
Affected: 10; 11.3
CVE-2016-6185
7.8
1%
Aug 2
The XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a string eval, which might allow local users to execute arbitrary code via a Trojan…
Affected: 10; 11.3
CVE-2016-3441
7.8
0%
Apr 21
Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect confidentiality, integrity, and availability via vectors related to Filesystem
Affected: 10; 11.3
CVE-2023-21985
7.7
0%
Apr 18
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility)
Affected: 10; 11
CVE-2018-2908
7.7
2%
Jul 18
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel)
Affected: 11.3
CVE-2018-2754
7.7
0%
Apr 19
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: ZVNET Driver)
Affected: 11.3
CVE-2017-3516
7.7
2%
Apr 24
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel Zones virtualized NIC driver)
Affected: 11.3
CVE-2022-21524
7.6
1%
Jul 19
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem)
Affected: 11
CVE-2018-2926
7.6
1%
Jul 18
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: NVIDIA-GFX Kernel driver)
Affected: 11.3
CVE-2026-61202
7.5
0%
Jul 21
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility)
Affected: 11.3; 11.4
CVE-2022-21514
7.5
1%
Jul 19
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Remote Administration Daemon)
Affected: 11
CVE-2020-12243
7.5
5%
Apr 28
In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash)
Affected: 10; 11
CVE-2020-7044
7.5
3%
Jan 16
In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash
Affected: 11
CVE-2020-2565
7.5
0%
Jan 15
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Consolidation Infrastructure)
Affected: 11
CVE-2019-19553
7.5
4%
Dec 5
In Wireshark 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12, the CMS dissector could crash
Affected: 11
CVE-2019-16056
7.5
5%
Sep 6
An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4
Affected: 11
CVE-2019-13565
7.5
5%
Jul 26
An issue was discovered in OpenLDAP 2.x before 2.4.48
Affected: 11
CVE-2019-2838
7.5
1%
Jul 23
Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel)
Affected: 11.4
CVE-2019-2541
7.5
1%
Jan 16
Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: DHCP Client)
Affected: 10
CVE-2019-2437
7.5
2%
Jan 16
Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel)
Affected: 11
CVE-2018-2764
7.5
3%
Apr 19
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel)
Affected: 10; 11.3
CVE-2018-2718
7.5
3%
Apr 19
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: RPC)
Affected: 10.0; 11.3
CVE-2018-2710
7.5
2%
Jan 18
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel)
Affected: 10.0
CVE-2017-10042
7.5
3%
Aug 8
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: IKE)
Affected: 10; 11
CVE-2017-10036
7.5
3%
Aug 8
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: NFSv4)
Affected: 10; 11
CVE-2016-4483
7.5
6%
Apr 11
The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a…
Affected: 11.3
CVE-2016-5842
7.5
6%
Dec 13
MagickCore/property.c in ImageMagick before 7.0.2-1 allows remote attackers to obtain sensitive memory information via vectors involving the q variable, which triggers an…
Affected: 10; 11.3
CVE-2016-2776
7.5
89%
Sep 28
buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause…
Affected: 10.0; 11.3
CVE-2016-6302
7.5
28%
Sep 16
The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers to…
Affected: 10; 11.3
CVE-2016-4957
7.5
45%
Jul 5
ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash) via a crypto-NAK packet
Affected: 10; 11.3
CVE-2016-4954
7.5
13%
Jul 5
The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed…
Affected: 10; 11.3
CVE-2016-4953
7.5
17%
Jul 5
ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect…
Affected: 10; 11.3
CVE-2016-3627
7.5
7%
May 17
The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery mode, allows context-dependent attackers to cause a denial of service (infinite…
Affected: 11.3
CVE-2016-2381
7.5
9%
Apr 8
Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in envp
Affected: 11.3
CVE-2015-7546
7.5
2%
Feb 3
The identity service in OpenStack Identity (Keystone) before 2015.1.3 (Kilo) and 8.0.x before 8.0.2 (Liberty) and keystonemiddleware (formerly python-keystoneclient) before 1.5.4…
Affected: 11.3
CVE-2015-7236
7.5
6%
Oct 1
Use-after-free vulnerability in xprt_set_caller in rpcb_svc_com.c in rpcbind 0.2.1 and earlier allows remote attackers to cause a denial of service (daemon crash) via crafted…
Affected: 10; 11.3
CVE-2015-3200
7.5
10%
Jun 9
mod_auth in lighttpd before 1.4.36 allows remote attackers to inject arbitrary log entries via a basic HTTP authentication string without a colon character, as demonstrated by a…
Affected: 11.3
CVE-2018-3275
7.4
2%
Oct 17
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: LibKMIP)
Affected: 11.3
CVE-2020-14724
7.3
0%
Jul 15
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Device Driver Utility)
Affected: 11
CVE-2019-2820
7.3
0%
Jul 23
Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Gnuplot)
Affected: 11.4
CVE-2019-2804
7.3
1%
Jul 23
Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Filesystem)
Affected: 10.0
CVE-2017-3497
7.3
2%
Apr 24
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Remote Administration Daemon)
Affected: 11.3
CVE-2025-30690
7.2
0%
Apr 15
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem)
Affected: 11
CVE-2018-2578
7.2
0%
Jan 18
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel)
Affected: 11.3
CVE-2026-60834
7.1
0%
Jul 21
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility)
Affected: 11.4
CVE-2026-60659
7.1
0%
Jul 21
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems)
Affected: 11.4
CVE-2026-46914
7.1
0%
Jun 16
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem)
Affected: 11.4
CVE-2020-2605
7.1
0%
Jan 15
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem)
Affected: 11
CVE-2026-60833
7.0
0%
Jul 21
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility)
Affected: 11.4
Page 2 of 10 · 500 total
123…10
The 500 most important CVEs for this product (exploited first, then by severity)