illumos vulnerabilities

CVEs per yearBy the year they were published

1. 20172
2. 20268

Newest CVEs

• CVE-2026-104115

  Stack buffer overflow in illumos reparsed nfs-basic plugin allows local users to crash the daemon

  illumos · illumos-gate

  Medium5.4
• CVE-2026-104114

  NULL pointer dereference in illumos nwamd door handler allows local users to crash the daemon

  illumos · illumos-gate

  Medium5.4
• CVE-2026-104112

  Missing release of passed file descriptors in illumos nscd allows local users to exhaust kernel memory

  illumos · illumos-gate

  Medium6.8
• CVE-2026-104116

  Missing authorization in illumos zonestatd allows local users to disrupt zonestat and enumerate running zones

  illumos · illumos-gate

  Low1.9
• CVE-2026-104117

  Missing authorization in illumos ipmgmtd allows local users to change persistent IPMP group membership

  illumos · illumos-gate

  Low1.9
• CVE-2026-102916

  Reachable assertion in illumos bhyve REP string instruction emulation allows guest to panic host

  illumos · illumos-gate

  Medium6.8
• CVE-2026-15422

  SCTP needs to better-check INIT ACK chunk parameters

  illumos · illumos-gate

  Critical9.1
• CVE-2026-15449

  TOCTOU double copyin in illumos dld ioctl handling causes kernel heap corruption

  illumos · illumos-gate

  Medium5.8
• CVE-2016-6561

  illumos smbsrv NULL pointer dereference allows system crash.

  illumos · osnet-incorporation

  High7.5
• CVE-2016-6560

  illumos osnet-incorporation bcopy() and bzero() implementations make signed instead of unsigned comparisons allowing a system crash.

  illumos · osnet-incorporation

  High8.6