Reference page — cumulative record through Thursday, October 8, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC PR UI S C I A CVSS EPSS %ile KEV L L L N C H H H 8.8 .1340 96.3 YES
AFFECTED Product Versions Fixed Solaris Operating System 11 – —
TIMELINE Dec 14 Reserved by oracle Oct 16 Published (CNA: oracle) May 25 Added to CISA KEV, remediation due 2022-06-15
Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
| Date | Event | Detail |
|---|---|---|
| December 14, 2018 | Reserved | Reserved by oracle |
| October 16, 2019 | Published | Published (CNA: oracle) |
| May 25, 2022 | KEV ADDED | Added to CISA KEV, remediation due 2022-06-15 |
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
|---|---|---|---|---|
| Oracle Corporation | Solaris Operating System | — | 11 | — |
Authoritative record: CVE-2019-3010 at cve.org
Vendors: oracle
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2019-3010 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Thursday, October 8, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.
