CVE-2020-2696

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment). The supported version that is affected is 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published: Jan 15, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-269608.8If the Compact() method was called on an nsTArray, the array could have been reallocated without updating other pointers, leading to a poten CVE-2020-269616.5When DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the responses as these do not make sense coming f CVE-2020-269626.1Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated. This could have be CVE-2020-269634.3Repeated calls to the history and location interfaces could have been used to hang the browser. This was addressed by introducing rate-limit CVE-2020-269646.8If the Remote Debugging via USB feature was enabled in Firefox for Android on an Android version prior to Android 6.0, untrusted apps could CVE-2020-269656.5Some websites have a feature "Show Password" where clicking a button will change a password field into a textbook field, revealing the typed CVE-2020-269666.5Searching for a single word from the address bar caused an mDNS request to be sent on the local network searching for a hostname consisting CVE-2020-269676.5When listening for page changes with a Mutation Observer, a malicious web page could confuse Firefox Screenshots into interacting with eleme CVE-2020-269688.8Mozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. Some of these bugs showed evidence of memory corr CVE-2020-269698.8Mozilla developers reported memory safety bugs present in Firefox 82. Some of these bugs showed evidence of memory corruption and we presume CVE-2020-26974.9Vulnerability in the Oracle Hospitality Suites Management component of Oracle Food and Beverage Applications. Supported versions that are af CVE-2020-269708.8When reading SMTP server status codes, Thunderbird writes an integer value to a position on the stack that is intended to contain just one b