The Oracle Solaris 11.4 Plugins component contains a defect that allows a local attacker with high privileges to compromise the system. The flaw is easily exploitable, requires the attacker to be logged on and to obtain remote user interaction from a separate user, and provides the attacker with the ability to create, delete, or modify critical data and gain unauthorized access to data that is normally protected by Solaris. This results in confidentiality and integrity disruptions but not availability loss. The underlying weakness is improper access control (CWE-284), allowing unauthorized privileged actions through the plugins interface.

Oracle Solaris version 11.4 is affected; the vulnerability is tied specifically to the Plugins component that runs within this supported release. Because the attack vector is local and requires elevated privileges, the primary risk targets systems where a user has high‑level access, though the scope change noted in the CVSS vector indicates that exploitation could potentially impact additional software components beyond Solaris.

The attack requires a high‑privileged local user and a second user’s interaction, and no public exploit evidence or KEV listing exists as of now. EPSS score is <1%, indicating a very low probability of exploitation, but the CVSS 7.4 score reveals a moderate‑to‑high risk level for confidentiality and integrity. The scope change (S:C) means that successful exploitation could alter configuration or shared settings, increasing the potential impact on connected applications or systems. Even without documented attacks, the presence of the defect warrants serious attention because the necessary conditions—local compromised credentials and user interaction—are realistic in enterprise environments.