Vulnerability in Oracle Solaris X Window System from Oracle Systems
CVE-2026-87423

4.5MEDIUM

Key Information:

Vendor

Oracle
Status
Oracle Solaris
Vendor
CVE Published:
20 October 2026

What is CVE-2026-87423?

A vulnerability exists in the X Window System component of Oracle Solaris that could permit a low privileged attacker, with access to the infrastructure running Oracle Solaris, to exploit the system. If successfully executed, this vulnerability can lead to unauthorized modifications to accessible data, along with unauthorized read access and potential for a partial denial of service. The affected version, Oracle Solaris 11.4, requires immediate attention to mitigate risks associated with data integrity and confidentiality.

Affected Version(s)

Oracle Solaris 11.4

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
4.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.