📦 Solaris

by Oracle

🔍 What is Solaris?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2020-14871

CRITICAL CVSS 10.0 Oct 21, 2020

This is a critical buffer overflow vulnerability (CWE-787) in Oracle Solaris's Pluggable Authentication Module (PAM) that allows unauthenticated remote attackers to execute arbitrary code with root pr...

CVE-2025-30690

HIGH CVSS 7.2 Apr 15, 2025

This vulnerability in Oracle Solaris 11's filesystem component allows a high-privileged attacker with local access to potentially take over the system. Exploitation requires human interaction from ano...

CVE-2024-21059

HIGH CVSS 7.8 Apr 16, 2024

This vulnerability in Oracle Solaris 11 allows a low-privileged local attacker to potentially compromise the entire system, leading to complete takeover. The attack requires local access and is diffic...

CVE-2024-20999

HIGH CVSS 8.2 Apr 16, 2024

This vulnerability in Oracle Solaris Zones allows a high-privileged attacker with local access to compromise the entire Solaris system, potentially leading to full system takeover. It affects Oracle S...

CVE-2023-21985

HIGH CVSS 7.7 Apr 18, 2023

This vulnerability in Oracle Solaris allows a high-privileged attacker with local access to compromise the system through a utility component. It requires human interaction from another user and can l...

CVE-2023-21948

HIGH CVSS 7.8 Apr 18, 2023

This vulnerability in Oracle Solaris 10 allows a low-privileged local attacker to gain complete control over the system. It affects users running Oracle Solaris 10 with default configurations. Success...

CVE-2023-21896

HIGH CVSS 7.0 Apr 18, 2023

This vulnerability in Oracle Solaris's NSSwitch component allows a low-privileged attacker with local access to potentially gain full control of the system. It affects Oracle Solaris versions 10 and 1...

CVE-2022-21524

HIGH CVSS 7.6 Jul 19, 2022

This vulnerability in Oracle Solaris 11's filesystem component allows authenticated attackers with network access via SMB to cause denial of service (system hangs/crashes) and perform unauthorized dat...

CVE-2026-21928

MEDIUM CVSS 5.3 Jan 20, 2026

This vulnerability in Oracle Solaris 11 kernel allows unauthenticated attackers with network access via TCP to read sensitive system data. It affects Oracle Solaris 11 systems exposed to networks. The...

CVE-2025-53070

MEDIUM CVSS 5.5 Oct 21, 2025

A local privilege escalation vulnerability in Oracle Solaris 11 filesystem component allows high-privileged attackers with system access to cause denial of service through system hangs or crashes. Exp...

CVE-2025-53068

MEDIUM CVSS 6.5 Oct 21, 2025

A local privilege escalation vulnerability in Oracle Solaris 11 kernel allows authenticated low-privileged users to cause a complete denial-of-service (system hang or crash). This affects all Oracle S...