X Window System Vulnerability in Oracle Solaris by Oracle Systems
CVE-2026-60453

5.3MEDIUM

Key Information:

Vendor

Oracle
Status
Oracle Solaris
Vendor
CVE Published:
20 October 2026

What is CVE-2026-60453?

A vulnerability exists in the X Window System component of Oracle Solaris, allowing a low-privileged attacker who has logged into the system to exploit various security flaws. This vulnerability enables unauthorized updates, inserts, or deletions within accessible data, as well as unauthorized read access to certain data sets. Additionally, it could lead to a partial denial of service, impacting system reliability and availability. Organizations utilizing Oracle Solaris 11.4 should be aware of these risks and take appropriate security measures.

Affected Version(s)

Oracle Solaris 11.4

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.