ZeroDay Findings
Sign inSign up

Findings

CVE-2019-3010

Oracle Solaris Privilege Escalation Vulnerability

Published Oct 16, 2019 · updated Jun 16, 2026 · oracle solaris

Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).

Timeline

Detection, updates, and resolution for this record.

  1. Oct 16, 2019 · Catalog

    Detected

    Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products. Successf

  2. May 25, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Jun 15, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products. Successf

Required action

Apply updates per vendor instructions.

CISA due date Jun 15, 2022

Affected

  • cpe oracle/solaris11
  • vendor Oracle Solarisversion unspecified

Sources

  • CISA KEVCVE-2019-3010

    Oracle Solaris component: XScreenSaver contains an unspecified vulnerability that allows for privilege escalation.

    cisa.gov
  • CVE.orgCVE-2019-3010

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2019-3010

    30-day exploitation probability 13.4%

    first.org
  • Exploit Database47529

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • Metasploit Modulesexploit_solaris/local/xscreensaver_log_priv_esc

    Public module reference (excellent). Module source is not copied into this catalog.

    rapid7.com
  • NIST NVDCVE-2019-3010

    Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Orac

    nvd.nist.gov
  • Packet Storm Securityhttp://packetstormsecurity.com/files/154960/Solaris-xscreensaver-Privilege-Escalation.html

    Packet Storm link already published on the finding.

    packetstormsecurity.com

References