CVE-2019-3010

HIGH

8.8

CVSS Score

Published: October 16, 2019 at 05:40 PM UTC

Updated: June 17, 2026 at 02:35 AM UTC

1 product affected across 1 vendorSolaris

Using Solaris Operating System by Oracle Corporation?

Get instant alerts when new vulnerabilities affect Solaris Operating System - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH8.8

Exploitation

CISA KEV

Exploit prediction

EPSS 13%

SSVC

Active

Actively Exploited

CISA Known Exploited Vulnerabilities (KEV) Catalog

EPSS Score13.4%

EPSS (Exploit Prediction Scoring System) estimates a 13.4% chance this CVE is exploited in the wild within the next 30 days — higher than 96% of all CVEs. It complements CVSS: a high EPSS on a mid-severity CVE can still be urgent.

Oracle Solaris component: XScreenSaver contains an unspecified vulnerability that allows for privilege escalation.

Required Action

Apply updates per vendor instructions.

Ransomware Use

Unknown

Added to KEV

May 25, 2022

Remediation Due

Jun 15, 2022

1595 days overdue

Notes

https://nvd.nist.gov/vuln/detail/CVE-2019-3010

Description

Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).