CVE-2017-3630

CVE-2017-3630 is a low-privileged local vulnerability affecting the Kernel subcomponent of Oracle Solaris versions 10 and 11. An attacker with logon access can exploit this to gain unauthorized read, write, or delete access to some data, and cause a partial denial of service. With a CVSS v3.0 score of 5.3 (Medium), this vulnerability has a low attack complexity and requires local access. While not listed on CISA's KEV, exploit code for privilege escalation is publicly available via Metasploit and ExploitDB, though there is minimal community discussion or media coverage.