SO
Product
Solaris
On CISA KEVExploited in the wildRansomware-linked
558
CVEs
7
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 17High 85Medium 110Low 35
Watch
Add Solaris to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-21463 | 5.5 | Apr 19 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel) Affected: 11 |
| CVE-2022-21461 | 5.5 | Apr 19 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel) Affected: 11 |
| CVE-2022-21375 | 5.5 | Jan 19 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel) Affected: 11 |
| CVE-2020-14754 | 5.5 | Oct 21 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem) Affected: 11 |
| CVE-2020-14537 | 5.5 | Jul 15 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Packaging Scripts) Affected: 11 |
| CVE-2018-2577 | 5.5 | Jan 18 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel) Affected: 11.3 |
| CVE-2016-5576 | 5.5 | Oct 25 | Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Kernel Zones Affected: 11.3 |
| CVE-2016-5471 | 5.5 | Jul 21 | Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Kernel, a different vulnerability than CVE-2016-3497 and… Affected: 11.3 |
| CVE-2016-5469 | 5.5 | Jul 21 | Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Kernel, a different vulnerability than CVE-2016-3497 and… Affected: 11.3 |
| CVE-2016-5452 | 5.5 | Jul 21 | Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect confidentiality via vectors related to Verified Boot Affected: 11.3 |
| CVE-2016-3497 | 5.5 | Jul 21 | Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Kernel, a different vulnerability than CVE-2016-5469 and… Affected: 11.3 |
| CVE-2016-3453 | 5.5 | Jul 21 | Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect availability via vectors related to Kernel Affected: 10 |
| CVE-2016-2178 | 5.5 | Jun 20 | The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure the use of constant-time operations, which makes it easier for local users… Affected: 10; 11.3 |
| CVE-2016-3465 | 5.5 | Apr 21 | Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect availability via vectors related to ZFS Affected: 11.3 |
| CVE-2016-3462 | 5.5 | Apr 21 | Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Network Configuration Service Affected: 11.3 |
| CVE-2009-2857 | 5.5 | Aug 19 | The kernel in Sun Solaris 8, 9, and 10, and OpenSolaris before snv_103, does not properly handle interaction between the filesystem and virtual-memory implementations, which… Affected: 8; 9; 10 |
| CVE-2015-5295 | 5.4 | Jan 20 | The template-validate command in OpenStack Orchestration API (Heat) before 2015.1.3 (kilo) and 5.0.x before 5.0.1 (liberty) allows remote authenticated users to cause a denial of… Affected: 11.3 |
| CVE-2026-21928 | 5.3 | Jan 20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel) Affected: 11 |
| CVE-2022-21271 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: 11 |
| CVE-2019-2765 | 5.3 | Oct 16 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem) Affected: 10; 11 |
| CVE-2019-2704 | 5.3 | Apr 23 | Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: IPS Package Manager) Affected: 11 |
| CVE-2019-2543 | 5.3 | Jan 16 | Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel) Affected: 10; 11 |
| CVE-2018-20685 | 5.3 | Jan 10 | In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of Affected: 10 |
| CVE-2018-3271 | 5.3 | Oct 17 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel Zones) Affected: 11.3 |
| CVE-2018-3268 | 5.3 | Oct 17 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: SMB Server) Affected: 11.3 |
| CVE-2018-3267 | 5.3 | Oct 17 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: LFTP) Affected: 11.3 |
| CVE-2018-3172 | 5.3 | Oct 17 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: RPC) Affected: 11.3 |
| CVE-2017-10062 | 5.3 | Aug 8 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Oracle Java Web Console) Affected: 10 |
| CVE-2017-3631 | 5.3 | Jun 22 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel) Affected: 11 |
| CVE-2017-3630 | 5.3 | Jun 22 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel) Affected: 10; 11 |
| CVE-2016-5566 | 5.3 | Oct 25 | Unspecified vulnerability in Oracle Sun Solaris 11.3 allows remote attackers to affect confidentiality via unknown vectors Affected: 11.3 |
| CVE-2016-5487 | 5.3 | Oct 25 | Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors Affected: 11.3 |
| CVE-2016-4956 | 5.3 | Jul 5 | ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast packet Affected: 10; 11.3 |
| CVE-2015-8629 | 5.3 | Feb 13 | The xdr_nullstring function in lib/kadm5/kadm_rpc_xdr.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 does not verify whether '\0' characters… Affected: 10; 11.3 |
| CVE-2015-3195 | 5.3 | Dec 6 | The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors… Affected: 10; 11.3 |
| CVE-2026-21942 | 5.0 | Jan 20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems) Affected: 10; 11 |
| CVE-2022-21416 | 5.0 | Apr 19 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility) Affected: 11 |
| CVE-2020-14545 | 5.0 | Jul 15 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Device Driver Utility) Affected: 11 |
| CVE-2020-2647 | 5.0 | Jan 15 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel) Affected: 10; 11 |
| CVE-2018-2808 | 5.0 | Apr 19 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel) Affected: 11.3 |
| CVE-2018-2560 | 5.0 | Jan 18 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel) Affected: 11.3 |
| CVE-2016-5553 | 5.0 | Oct 25 | Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect availability via unknown vectors Affected: 10; 11.3 |
| CVE-2019-13057 | 4.9 | Jul 26 | An issue was discovered in the server in OpenLDAP before 2.4.48 Affected: 11 |
| CVE-2018-3265 | 4.9 | Oct 17 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Zones) Affected: 11.3 |
| CVE-2022-21263 | 4.8 | Jan 19 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Fault Management Architecture) Affected: 11 |
| CVE-2016-0676 | 4.7 | Apr 21 | Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect availability via vectors related to the kernel Affected: 10 |
| CVE-2016-0623 | 4.7 | Apr 21 | Unspecified vulnerability in Oracle Sun Solaris 11.3 allows remote attackers to affect integrity via vectors related to the Automated Installer sub-component Affected: 11.3 |
| CVE-2020-2664 | 4.6 | Jan 15 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem) Affected: 11 |
| CVE-2017-10003 | 4.5 | Aug 8 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Network Services Library) Affected: 10 |
| CVE-2020-2656 | 4.4 | Jan 15 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System) Affected: 10; 11 |
The 500 most important CVEs for this product (exploited first, then by severity)
