CVE-2018-2922: Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel).

Security readout for executives and security teams

CVE-2018-2922 is a Solaris kernel information disclosure issue affecting Oracle Solaris 11.3. An attacker needs a low-privileged login on the Solaris system, and exploitation is described as difficult. Successful exploitation could expose a limited subset of Solaris-accessible data. Exposure is most likely on Oracle Solaris 11.3 systems that allow interactive or service account logon by low-privileged users. Systems without affected Solaris versions, or without local account access paths, are less exposed based on the provided evidence. Treat as a low-priority patch governance item unless Solaris 11.3 hosts support sensitive workloads or broad local user access. The business risk is limited confidentiality exposure, not system takeover, integrity loss, or outage, based on the provided CVSS description. Mitigation focus: Check Oracle's October 2018 Critical Patch Update guidance for Solaris remediation.; Prioritize Solaris 11.3 hosts with many local users or shared administrative access.; Reduce unnecessary low-privileged logon access to affected Solaris systems..

Prepared

Jun 7, 2026, 05:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.