CVE-2026-34281
Received Received - Intake
Kernel Denial of Service Vulnerability in Oracle Solaris

Publication date: 2026-04-21

Last updated on: 2026-04-23

Assigner: Oracle

Description
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-04-21
Last Modified
2026-04-23
Generated
2026-06-16
AI Q&A
2026-04-22
EPSS Evaluated
2026-06-15
NVD
CVE-2026-34281
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
oracle solaris 11.4
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-400 The product does not properly control the allocation and maintenance of a limited resource.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Compliance Impact

The vulnerability in Oracle Solaris allows a low privileged attacker to cause a denial of service (DoS) by hanging or crashing the system. This impacts availability but does not affect confidentiality or integrity.

Since the vulnerability does not lead to unauthorized access to data or data breaches, its direct impact on compliance with standards like GDPR or HIPAA, which focus heavily on data protection and privacy, is limited.

However, the availability impact could affect compliance with regulations that require system availability and reliability as part of their controls.

Impact Analysis

If exploited, this vulnerability can allow an attacker with low privileges to cause Oracle Solaris to hang or crash repeatedly, leading to a complete denial of service. This means that the system or infrastructure running Oracle Solaris could become unavailable or unstable, disrupting normal operations.

Executive Summary

This vulnerability exists in the Oracle Solaris Kernel component of Oracle Systems, specifically affecting version 11.4. It allows a low privileged attacker who has logged into the system to exploit the vulnerability easily. The attacker can compromise Oracle Solaris, potentially affecting other related products as well.

The main impact of the vulnerability is that it can cause Oracle Solaris to hang or crash repeatedly, resulting in a complete denial of service (DoS).

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-34281. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart