SO
Product
Solaris
On CISA KEVExploited in the wildRansomware-linked
558
CVEs
7
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 17High 85Medium 110Low 35
Watch
Add Solaris to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-21896 | 7.0 | Apr 18 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: NSSwitch) Affected: 10; 11 |
| CVE-2018-1171 | 7.0 | Mar 19 | This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z Affected: 10; 11.3 |
| CVE-2018-1165 | 7.0 | Feb 21 | This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z Affected: 11 |
| CVE-2016-3584 | 7.0 | Jul 21 | Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect confidentiality, integrity, and availability via vectors related to Libadimalloc Affected: 11.3 |
| CVE-2017-10004 | 6.7 | Aug 8 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel) Affected: 10; 11 |
| CVE-2018-2717 | 6.6 | Jan 18 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: SPARC Platform) Affected: 10.0; 11.3 |
| CVE-2017-3551 | 6.6 | Apr 24 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Smartcard Libraries) Affected: 11.3 |
| CVE-2026-34281 | 6.5 | Apr 21 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel) Affected: 11.4 |
| CVE-2025-53068 | 6.5 | Oct 21 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel) Affected: 11 |
| CVE-2023-21984 | 6.5 | Apr 18 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Libraries) Affected: 11 |
| CVE-2021-35539 | 6.5 | Oct 20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem) Affected: 11 |
| CVE-2019-16168 | 6.5 | Sep 9 | In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe… Affected: 11 |
| CVE-2015-8786 | 6.5 | Dec 9 | The Management plugin in RabbitMQ before 3.6.1 allows remote authenticated users with certain privileges to cause a denial of service (resource consumption) via the (1)… Affected: 11.3 |
| CVE-2016-5844 | 6.5 | Sep 21 | Integer overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a crafted ISO file Affected: 11.3 |
| CVE-2016-0777 | 6.5 | Jan 14 | The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by… Affected: 11.3 |
| CVE-2016-5454 | 6.4 | Jul 21 | Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect integrity and availability via vectors related to Verified Boot Affected: 11.3 |
| CVE-2019-2788 | 6.3 | Jul 23 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Open Fabrics Tools) Affected: 11.4 |
| CVE-2018-3272 | 6.2 | Oct 17 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel Zones Virtualized NIC Driver) Affected: 11.3 |
| CVE-2021-2192 | 6.1 | Apr 22 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel) Affected: 11 |
| CVE-2019-12387 | 6.1 | Jun 10 | In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF Affected: 11 |
| CVE-2016-5606 | 6.1 | Oct 25 | Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect integrity and availability via vectors related to Kernel Zones Affected: 11.3 |
| CVE-2025-21551 | 6.0 | Jan 21 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: File system) Affected: 11 |
| CVE-2021-35589 | 6.0 | Oct 20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Device drivers) Affected: 11 |
| CVE-2020-2680 | 6.0 | Jan 15 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem) Affected: 11 |
| CVE-2018-2753 | 6.0 | Apr 19 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Python modules) Affected: 11.3 |
| CVE-2016-0669 | 6.0 | Apr 21 | Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect integrity and availability via vectors related to Fwflash Affected: 11.3 |
| CVE-2022-21493 | 5.9 | Apr 19 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel) Affected: 11 |
| CVE-2016-5358 | 5.9 | Aug 7 | epan/dissectors/packet-pktap.c in the Ethernet dissector in Wireshark 2.x before 2.0.4 mishandles the packet-header data type, which allows remote attackers to cause a denial of… Affected: 11.3 |
| CVE-2016-5357 | 5.9 | Aug 7 | wiretap/netscreen.c in the NetScreen file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote… Affected: 11.3 |
| CVE-2016-4955 | 5.9 | Jul 5 | ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service (peer-variable clearing and association outage) by sending (1) a… Affected: 10; 11.3 |
| CVE-2016-4085 | 5.9 | Apr 25 | Stack-based buffer overflow in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.12.x before 1.12.11 allows remote attackers to cause a denial of service… Affected: 11.3 |
| CVE-2016-4082 | 5.9 | Apr 25 | epan/dissectors/packet-gsm_cbch.c in the GSM CBCH dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 uses the wrong variable to index an array, which allows… Affected: 11.3 |
| CVE-2016-4079 | 5.9 | Apr 25 | epan/dissectors/packet-pktc.c in the PKTC dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not verify BER identifiers, which allows remote attackers to… Affected: 11.3 |
| CVE-2015-2774 | 5.9 | Apr 7 | Erlang/OTP before 18.0-rc1 does not properly check CBC padding bytes when terminating connections, which makes it easier for man-in-the-middle attackers to obtain cleartext data… Affected: 11.2 |
| CVE-2026-21935 | 5.8 | Jan 20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Driver) Affected: 11 |
| CVE-2026-21927 | 5.8 | Jan 20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Driver) Affected: 10; 11 |
| CVE-2020-2578 | 5.8 | Jan 15 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel) Affected: 11 |
| CVE-2020-2558 | 5.8 | Jan 15 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel) Affected: 11 |
| CVE-2018-3274 | 5.7 | Oct 17 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel) Affected: 11.3 |
| CVE-2017-3276 | 5.7 | Jan 27 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel Zones virtualized block driver) Affected: 11.3 |
| CVE-2020-14758 | 5.6 | Oct 21 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel) Affected: 11 |
| CVE-2018-3263 | 5.6 | Oct 17 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Sudo) Affected: 11.3 |
| CVE-2026-61052 | 5.5 | Jul 21 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems) Affected: 11.4 |
| CVE-2025-53070 | 5.5 | Oct 21 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem) Affected: 11 |
| CVE-2024-20946 | 5.5 | Jan 16 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel) Affected: 11 |
| CVE-2023-22129 | 5.5 | Oct 17 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel) Affected: 11 |
| CVE-2021-43395 | 5.5 | Dec 26 | An issue was discovered in illumos before f859e7171bb5db34321e45585839c6c3200ebb90, OmniOS Community Edition r151038, OpenIndiana Hipster 2021.04, and SmartOS 20210923 Affected: 10; 11 |
| CVE-2022-39401 | 5.5 | Oct 18 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel) Affected: 11 |
| CVE-2022-39417 | 5.5 | Oct 18 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem) Affected: 11 |
| CVE-2022-21533 | 5.5 | Jul 19 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: SMB Server) Affected: 11 |
The 500 most important CVEs for this product (exploited first, then by severity)