Vendor

    Illumos

    16 known vulnerabilities in products by Illumos, 0 of them actively exploited (CISA KEV).

    Key figures

    16

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Illumos
    HighCVE-2016-6561

    Illumos Osnet-incorporation: NULL Pointer Dereference

    7.5
    CriticalCVE-2026-15422

    SCTP needs to better-check INIT ACK chunk parameters

    also in 1 other product

    —
    CriticalCVE-2020-27678

    Omniosce Omnios: Buffer Overflow

    also in 2 other products

    9.8
    HighCVE-2016-6560

    Illumos Osnet-incorporation: Signed to Unsigned Conversion Error

    8.6
    Not ratedCVE-2012-0217

    Citrix XenServer: Privilege Escalation

    also in 10 other products

    —
    MediumCVE-2026-102916

    Reachable assertion in illumos bhyve REP string instruction emulation allows guest to panic host

    also in 1 other product

    —
    MediumCVE-2026-104112

    Illumos-gate: Missing Release of Resource after Effective Lifetime

    also in 1 other product

    —
    Not ratedCVE-2014-9491

    Illumos: NULL Pointer Dereference

    —
    HighCVE-2019-9579

    Illumos: security vulnerability

    also in 1 other product

    8.1
    MediumCVE-2026-104115

    Stack buffer overflow in illumos reparsed nfs-basic plugin allows local users to crash the daemon

    also in 1 other product

    —
    MediumCVE-2026-104114

    NULL pointer dereference in illumos nwamd door handler allows local users to crash the daemon

    also in 1 other product

    —
    MediumCVE-2026-15449

    TOCTOU double copyin in illumos dld ioctl handling causes kernel heap corruption

    also in 1 other product

    —
    HighCVE-2023-31284

    Illumos-gate: Stack-Based Buffer Overflow

    7.8
    LowCVE-2026-104116

    Illumos-gate: Missing Authorization

    also in 1 other product

    —
    LowCVE-2026-104117

    Illumos-gate: Missing Authorization

    also in 1 other product

    —
    MediumCVE-2021-43395

    Oracle Solaris: Deadlock

    also in 3 other products

    5.5

    Products

    Products by Illumos
    Illumos-gate90
    Illumos70