Login Request a demo
SO
Product
Solaris
by Oracle Corporation · last CVE Jul 21, 2026
On CISA KEVExploited in the wildRansomware-linked
558
CVEs
7
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities558In the news2Timeline
Severity mix
Critical 17High 85Medium 110Low 35
Severity
All severities500Critical17High85Medium110Low35
Exploitation
On CISA KEV7Exploited in the wild7
Watch

Add Solaris to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-3010
In wildKEV
8.8
13%
Oct 16
Oracle Solaris Privilege Escalation Vulnerability
Affected: 11
CVE-2015-4495
In wildKEV
8.8
69%
Aug 8
Mozilla Firefox Security Feature Bypass Vulnerability
Affected: 11.3
CVE-2008-2992
RansomwareIn wildKEV
7.8
100%
Nov 4
Adobe Reader and Acrobat Input Validation Vulnerability
Affected: 10
CVE-2015-5477
In wildKEV
7.5
100%
Jul 29
ISC BIND Data Processing Errors Vulnerability
Affected: 10; 11.2
CVE-2020-2944
8.8
2%
Apr 15
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment)
Affected: 10; 11
CVE-2020-2696
8.8
1%
Jan 15
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment)
Affected: 10
CVE-2019-2844
8.8
0%
Jul 23
Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: LDAP Client Tools)
Affected: 11.4
CVE-2019-2832
8.8
0%
Jul 23
Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Common Desktop Environment)
Affected: 10
CVE-2016-6491
8.8
5%
Dec 13
Buffer overflow in the Get8BIMProperty function in MagickCore/property.c in ImageMagick before 6.9.5-4 and 7.x before 7.0.2-6 allows remote attackers to cause a denial of service…
Affected: 10.0; 11.3
CVE-2016-4971
8.8
46%
Jun 30
GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource
Affected: 10; 11.3
CVE-2015-0973
8.8
4%
Jan 18
Buffer overflow in the png_read_IDAT_data function in pngrutil.c in libpng before 1.5.21 and 1.6.x before 1.6.16 allows context-dependent attackers to execute arbitrary code via…
Affected: 11.2
CVE-2024-20999
8.2
0%
Apr 16
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Zones)
Affected: 11
CVE-2022-21446
8.2
2%
Apr 19
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility)
Affected: 11
CVE-2017-3564
8.2
0%
Apr 24
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: RBAC)
Affected: 11.3
CVE-2019-9579
8.1
1%
Dec 26
An issue was discovered in Illumos in Nexenta NexentaStor 4.0.5 and 5.1.2, and other products
Affected: 11
CVE-2018-3273
8.1
3%
Oct 17
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Remote Administration Daemon (RAD))
Affected: 11.3
CVE-2018-2928
8.1
2%
Jul 18
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: RAD)
Affected: 11.3
CVE-2016-5688
8.1
5%
Dec 13
The WPG parser in ImageMagick before 6.9.4-4 and 7.x before 7.0.1-5, when a memory limit is set, allows remote attackers to have unspecified impact via vectors related to the…
Affected: 11.3
CVE-2016-5387
8.1
56%
Jul 19
The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY…
Affected: 11.3
CVE-2016-0778
8.1
21%
Jan 14
The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certain proxy and forward options are…
Affected: 11.3
CVE-2017-3565
7.9
0%
Apr 24
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: RBAC)
Affected: 11.3
CVE-2026-60661
7.8
0%
Jul 21
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems)
Affected: 11.4
CVE-2024-21059
7.8
0%
Apr 16
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility)
Affected: 11
CVE-2023-22023
7.8
0%
Jul 18
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Device Driver Interface)
Affected: 11
CVE-2023-21948
7.8
0%
Apr 18
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Core)
Affected: 10
CVE-2021-2167
7.8
0%
Apr 22
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment)
Affected: 10
CVE-2020-2927
7.8
0%
Apr 15
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment)
Affected: 10; 11
CVE-2020-2851
7.8
1%
Apr 15
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment)
Affected: 10; 11
CVE-2018-2892
7.8
2%
Jul 18
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Availability Suite Service)
Affected: 10.0; 11.3
CVE-2017-3629
7.8
5%
Jun 22
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel)
Affected: 10; 11
CVE-2017-3622
7.8
5%
Apr 24
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Common Desktop Environment (CDE))
Affected: 10
CVE-2016-2334
7.8
15%
Dec 13
Heap-based buffer overflow in the NArchive::NHfs::CHandler::ExtractZlibFile method in 7zip before 16.00 and p7zip allows remote attackers to execute arbitrary code via a crafted…
Affected: All versions, or not specified
CVE-2016-5544
7.8
0%
Oct 25
Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect confidentiality, integrity, and availability via vectors related to Kernel/X86
Affected: 10; 11.3
CVE-2016-6185
7.8
1%
Aug 2
The XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a string eval, which might allow local users to execute arbitrary code via a Trojan…
Affected: 10; 11.3
CVE-2016-3441
7.8
0%
Apr 21
Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect confidentiality, integrity, and availability via vectors related to Filesystem
Affected: 10; 11.3
CVE-2023-21985
7.7
0%
Apr 18
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility)
Affected: 10; 11
CVE-2018-2908
7.7
2%
Jul 18
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel)
Affected: 11.3
CVE-2018-2754
7.7
0%
Apr 19
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: ZVNET Driver)
Affected: 11.3
CVE-2017-3516
7.7
2%
Apr 24
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel Zones virtualized NIC driver)
Affected: 11.3
CVE-2022-21524
7.6
1%
Jul 19
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem)
Affected: 11
CVE-2018-2926
7.6
1%
Jul 18
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: NVIDIA-GFX Kernel driver)
Affected: 11.3
CVE-2026-61202
7.5
0%
Jul 21
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility)
Affected: 11.3; 11.4
CVE-2022-21514
7.5
1%
Jul 19
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Remote Administration Daemon)
Affected: 11
CVE-2020-12243
7.5
5%
Apr 28
In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash)
Affected: 10; 11
CVE-2020-7044
7.5
3%
Jan 16
In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash
Affected: 11
CVE-2020-2565
7.5
0%
Jan 15
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Consolidation Infrastructure)
Affected: 11
CVE-2019-19553
7.5
4%
Dec 5
In Wireshark 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12, the CMS dissector could crash
Affected: 11
CVE-2019-16056
7.5
5%
Sep 6
An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4
Affected: 11
CVE-2019-13565
7.5
5%
Jul 26
An issue was discovered in OpenLDAP 2.x before 2.4.48
Affected: 11
CVE-2019-2838
7.5
1%
Jul 23
Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel)
Affected: 11.4
Page 1 of 2 · 85 total
12
The 500 most important CVEs for this product (exploited first, then by severity)