Oracle Solaris <11.4 SRU 94

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

4critical5high7medium0low

updated 2026-10-27

vulnerabilities (68)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-46529US	—	0.53% (45th)	Exploit	no fix	2026-06-10	—
CVE-2026-22005US	—	0.32% (25th)	Exploit	no fix	2026-04-21	—
CVE-2026-22004US	—	0.32% (25th)	Exploit	no fix	2026-04-21	—
CVE-2026-22002US	—	0.32% (25th)	Exploit	no fix	2026-04-21	—
CVE-2026-34308US	—	0.30% (23rd)	Exploit	no fix	2026-04-21	—
CVE-2026-22017US	—	0.30% (23rd)	Exploit	no fix	2026-04-21	—
CVE-2026-22009US	—	0.30% (23rd)	Exploit	no fix	2026-04-21	—
CVE-2026-22001US	—	0.26% (18th)	Exploit	no fix	2026-04-21	—
CVE-2026-8388US	—	0.24% (15th)	Exploit	no fix	2026-05-12	—
CVE-2026-22015US	—	0.24% (15th)	Exploit	no fix	2026-04-21	—
CVE-2026-6722US	critical9.8	0.89% (59th)	—	no fix	2026-05-10	—
CVE-2026-7262US	high7.5	0.78% (56th)	—	no fix	2026-05-10	—
CVE-2026-42305US	—	0.64% (50th)	—	no fix	2026-06-10	—
CVE-2026-8956US	—	0.60% (49th)	—	no fix	2026-05-19	—
CVE-2026-8949US	—	0.58% (48th)	—	no fix	2026-05-19	—
CVE-2026-8946US	—	0.56% (46th)	—	no fix	2026-05-19	—
CVE-2026-42563US	—	0.56% (46th)	—	no fix	2026-06-10	—
CVE-2026-8953US	—	0.53% (45th)	—	no fix	2026-05-19	—
CVE-2026-8975US	—	0.47% (41st)	—	no fix	2026-05-19	—
CVE-2026-6104US	critical9.1	0.47% (40th)	—	no fix	2026-05-10	—
CVE-2026-7568US	high7.5	0.46% (39th)	—	no fix	2026-05-10	—
CVE-2025-14179US	critical9.8	0.44% (38th)	—	no fix	2026-05-10	—
CVE-2026-42304US	—	0.43% (37th)	—	no fix	2026-05-13	—
CVE-2026-8954US	—	0.43% (37th)	—	no fix	2026-05-19	—
CVE-2026-8959US	—	0.42% (36th)	—	no fix	2026-05-19	—
CVE-2026-8968US	—	0.41% (35th)	—	no fix	2026-05-19	—
CVE-2026-8947US	—	0.41% (35th)	—	no fix	2026-05-19	—
CVE-2026-8957US	—	0.39% (32nd)	—	no fix	2026-05-19	—
CVE-2026-8955US	—	0.39% (32nd)	—	no fix	2026-05-19	—
CVE-2026-8962US	—	0.37% (31st)	—	no fix	2026-05-19	—
CVE-2026-8974US	—	0.36% (30th)	—	no fix	2026-05-19	—
CVE-2026-7258US	high7.5	0.36% (30th)	—	no fix	2026-05-10	—
CVE-2026-7263US	high7.5	0.35% (29th)	—	no fix	2026-05-10	—
CVE-2026-8958US	—	0.34% (28th)	—	no fix	2026-05-19	—
CVE-2026-38974US	—	0.33% (25th)	—	no fix	2026-07-15	—
CVE-2026-34304US	—	0.32% (25th)	—	no fix	2026-04-21	—
CVE-2026-34293US	—	0.32% (25th)	—	no fix	2026-04-21	—
CVE-2026-34278US	—	0.32% (25th)	—	no fix	2026-04-21	—
CVE-2026-34267US	—	0.32% (25th)	—	no fix	2026-04-21	—
CVE-2026-21998US	—	0.32% (25th)	—	no fix	2026-04-21	—
CVE-2026-8961US	—	0.32% (25th)	—	no fix	2026-05-19	—
CVE-2026-8401US	—	0.31% (24th)	—	no fix	2026-05-12	—
CVE-2026-8970US	—	0.31% (23rd)	—	no fix	2026-05-19	—
CVE-2026-34303US	—	0.30% (23rd)	—	no fix	2026-04-21	—
CVE-2026-34276US	—	0.30% (23rd)	—	no fix	2026-04-21	—
CVE-2026-34271US	—	0.30% (23rd)	—	no fix	2026-04-21	—
CVE-2026-34270US	—	0.30% (23rd)	—	no fix	2026-04-21	—
CVE-2026-7261US	critical9.8	0.30% (23rd)	—	no fix	2026-05-10	—
CVE-2026-8391US	—	0.30% (22nd)	—	no fix	2026-05-12	—
CVE-2026-35240US	—	0.24% (15th)	—	no fix	2026-04-21	—

showing 50 of 68

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-400Uncontrolled Resource Consumption18 CVEs
CWE-770Allocation of Resources Without Limits or Throttling18 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer7 CVEs
CWE-190Integer Overflow or Wraparound5 CVEs
CWE-284Improper Access Control5 CVEs
CWE-416Use After Free4 CVEs
CWE-693Protection Mechanism Failure4 CVEs
CWE-787Out-of-bounds Write4 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)68 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan