CVE-2025-53070
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
Vulnerability in Oracle Solaris 11, Filesystem component. It requires high privileges and user interaction but can lead to a hang or frequently repeatable crash (complete DoS).
Risk Assessment
An attacker with high privileges and local access can cause a system crash, resulting in service unavailability.
Recommendation
Apply the available Oracle patches for Oracle Solaris 11 as per Oracle Critical Patch Update guidance.
Other vulnerabilities in Oracle Solaris
See all- CVE-2014-6524High
Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Kernel.
- CVE-2014-6521High
Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality, integrity, and availability via vectors related to CDE - Power Management Utility.
- CVE-2014-6510High
An unspecified vulnerability in Oracle Solaris 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Power Management Utility.
- CVE-2020-14871CriticalActively exploited
Vulnerability in the Pluggable authentication module of Oracle Solaris affecting versions 10 and 11. An unauthenticated attacker with network access via multiple protocols can easily exploit it and take over the system; it is not exploitable on Solaris 11.1 and later or ZFSSA 8.7 and later.
- CVE-2019-3010HighActively exploited
Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.0 Base Score 8.8.
- CVE-2026-61202High
In Oracle Solaris (Utility component), a difficult-to-exploit vulnerability allows a local low-privileged attacker to unauthorizedly create, delete, or modify critical data and access all Solaris data. The vulnerability affects additional products (scope change).
- CVE-2026-61052Medium
In Oracle Solaris (component Filesystems) version 11.4, an easily exploitable vulnerability allows a low-privileged attacker with logon to the infrastructure where Oracle Solaris executes to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. CVSS 3.1 Base Score 5.5 (Availability impacts).
- CVE-2026-60834High
Vulnerability in Oracle Solaris product of Oracle Systems, component Utility. Affects version 11.4. A difficult-to-exploit vulnerability allows a low-privileged attacker with network access via RAD to gain unauthorized access to critical data and partial ability to update, insert, or delete it. Attacks may significantly impact additional products (scope change).
- CVE-2026-60833High
A vulnerability in Oracle Solaris (component: Utility) in version 11.4. A difficult-to-exploit vulnerability allows a low privileged attacker with local access to compromise Oracle Solaris (CVSS 7.0).
- CVE-2026-60661High
Vulnerability in Oracle Solaris (Filesystems component) allows a low-privileged attacker with local access to take over the system. Attacks may impact additional products (scope change).
Original NVD description (English source)
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Solaris, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. CVSS 3.1 Base Score 5.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:N/I:N/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS