Login Request a demo
SO
Product
Solaris
by Oracle Corporation · last CVE Jul 21, 2026
On CISA KEVExploited in the wildRansomware-linked
558
CVEs
7
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities558In the news2Timeline
Severity mix
Critical 17High 85Medium 110Low 35
Severity
All severities500Critical17High85Medium110Low35
Exploitation
On CISA KEV7Exploited in the wild7
Watch

Add Solaris to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-2541
7.5
1%
Jan 16
Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: DHCP Client)
Affected: 10
CVE-2019-2437
7.5
2%
Jan 16
Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel)
Affected: 11
CVE-2018-2764
7.5
3%
Apr 19
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel)
Affected: 10; 11.3
CVE-2018-2718
7.5
3%
Apr 19
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: RPC)
Affected: 10.0; 11.3
CVE-2018-2710
7.5
2%
Jan 18
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel)
Affected: 10.0
CVE-2017-10042
7.5
3%
Aug 8
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: IKE)
Affected: 10; 11
CVE-2017-10036
7.5
3%
Aug 8
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: NFSv4)
Affected: 10; 11
CVE-2016-4483
7.5
6%
Apr 11
The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a…
Affected: 11.3
CVE-2016-5842
7.5
6%
Dec 13
MagickCore/property.c in ImageMagick before 7.0.2-1 allows remote attackers to obtain sensitive memory information via vectors involving the q variable, which triggers an…
Affected: 10; 11.3
CVE-2016-2776
7.5
89%
Sep 28
buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause…
Affected: 10.0; 11.3
CVE-2016-6302
7.5
28%
Sep 16
The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers to…
Affected: 10; 11.3
CVE-2016-4957
7.5
45%
Jul 5
ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash) via a crypto-NAK packet
Affected: 10; 11.3
CVE-2016-4954
7.5
13%
Jul 5
The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed…
Affected: 10; 11.3
CVE-2016-4953
7.5
17%
Jul 5
ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect…
Affected: 10; 11.3
CVE-2016-3627
7.5
7%
May 17
The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery mode, allows context-dependent attackers to cause a denial of service (infinite…
Affected: 11.3
CVE-2016-2381
7.5
9%
Apr 8
Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in envp
Affected: 11.3
CVE-2015-7546
7.5
2%
Feb 3
The identity service in OpenStack Identity (Keystone) before 2015.1.3 (Kilo) and 8.0.x before 8.0.2 (Liberty) and keystonemiddleware (formerly python-keystoneclient) before 1.5.4…
Affected: 11.3
CVE-2015-7236
7.5
6%
Oct 1
Use-after-free vulnerability in xprt_set_caller in rpcb_svc_com.c in rpcbind 0.2.1 and earlier allows remote attackers to cause a denial of service (daemon crash) via crafted…
Affected: 10; 11.3
CVE-2015-3200
7.5
10%
Jun 9
mod_auth in lighttpd before 1.4.36 allows remote attackers to inject arbitrary log entries via a basic HTTP authentication string without a colon character, as demonstrated by a…
Affected: 11.3
CVE-2018-3275
7.4
2%
Oct 17
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: LibKMIP)
Affected: 11.3
CVE-2020-14724
7.3
0%
Jul 15
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Device Driver Utility)
Affected: 11
CVE-2019-2820
7.3
0%
Jul 23
Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Gnuplot)
Affected: 11.4
CVE-2019-2804
7.3
1%
Jul 23
Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Filesystem)
Affected: 10.0
CVE-2017-3497
7.3
2%
Apr 24
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Remote Administration Daemon)
Affected: 11.3
CVE-2025-30690
7.2
0%
Apr 15
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem)
Affected: 11
CVE-2018-2578
7.2
0%
Jan 18
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel)
Affected: 11.3
CVE-2026-60834
7.1
0%
Jul 21
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility)
Affected: 11.4
CVE-2026-60659
7.1
0%
Jul 21
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems)
Affected: 11.4
CVE-2026-46914
7.1
0%
Jun 16
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem)
Affected: 11.4
CVE-2020-2605
7.1
0%
Jan 15
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem)
Affected: 11
CVE-2026-60833
7.0
0%
Jul 21
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility)
Affected: 11.4
CVE-2023-21896
7.0
0%
Apr 18
Vulnerability in the Oracle Solaris product of Oracle Systems (component: NSSwitch)
Affected: 10; 11
CVE-2018-1171
7.0
0%
Mar 19
This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z
Affected: 10; 11.3
CVE-2018-1165
7.0
0%
Feb 21
This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z
Affected: 11
CVE-2016-3584
7.0
0%
Jul 21
Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect confidentiality, integrity, and availability via vectors related to Libadimalloc
Affected: 11.3
Page 2 of 2 · 85 total
12
The 500 most important CVEs for this product (exploited first, then by severity)