Known vulnerabilities in Anolis OS 23

Vendor: OpenAnolis
Software: Anolis OS
Version: 23
Software CPE: cpe:2.3:o:openanolis:anolis_os:*:*:*:*:*:*:*:*
Website: https://openanolis.cn/
Total vulnerabilities: 2912
Public exploits: 140
Known exploited (KEV): 31
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Anolis OS version 23 Anolis OS 23 is affected by 2912 vulnerabilities: 21 critical, 456 high, 1070 medium, 1365 low Critical High Medium Low

Vulnerabilities (2912)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU151839 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-86350		 CWE-444 Medium
No
No
 - 23.09.2026 SB2026092344
SB2026100975
SB2026100977
and 1 more
#VU151841 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-79677		 CWE-362 Medium
No
No
 - 23.09.2026 SB2026092344
SB2026100975
SB2026100977
and 1 more
#VU151842 - Resource exhaustion
CVE-2026-78437		 CWE-400 Low
No
No
 - 23.09.2026 SB2026092344
SB2026100975
SB2026100977
and 1 more
#VU151843 - Resource exhaustion
CVE-2026-78383		 CWE-400 Medium
No
No
 - 23.09.2026 SB2026092344
SB2026100975
SB2026100977
and 1 more
#VU151844 - Resource exhaustion
CVE-2026-77791		 CWE-400 Medium
No
No
 - 23.09.2026 SB2026092344
SB2026100975
SB2026100977
and 1 more
#VU151845 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-77762		 CWE-362 Low
No
No
 - 23.09.2026 SB2026092344
SB2026100975
SB2026100977
and 1 more
#VU151846 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-77756		 CWE-444 Low
No
No
 - 23.09.2026 SB2026092344
SB2026100975
SB2026100977
and 1 more
#VU151847 - Improper Access Control
CVE-2026-76183		 CWE-284 Medium
No
No
 - 23.09.2026 SB2026092344
SB2026100975
SB2026100977
and 1 more
#VU151849 - Improper Certificate Validation
CVE-2026-73581		 CWE-295 Medium
No
No
 - 23.09.2026 SB2026092344
SB2026100975
SB2026100977
and 1 more
#VU150054 - Use After Free
CVE-2026-92005		 CWE-416 High
No
No
 - 15.09.2026 SB2026091579
SB20260917225
SB20260921168
and 8 more
#VU150037 - Improper input validation
CVE-2026-92010		 CWE-20 High
No
No
 - 15.09.2026 SB2026091579
SB20260917225
SB20260921168
and 8 more
#VU150034 - Improper input validation
CVE-2026-92007		 CWE-20 High
No
No
 - 15.09.2026 SB2026091579
SB20260917225
SB20260921168
and 8 more
#VU150035 - Improper input validation
CVE-2026-92008		 CWE-20 High
No
No
 - 15.09.2026 SB2026091579
SB20260917225
SB20260921168
and 8 more
#VU150036 - Improper input validation
CVE-2026-92009		 CWE-20 High
No
No
 - 15.09.2026 SB2026091579
SB20260917225
SB20260921168
and 8 more
#VU150033 - Improper input validation
CVE-2026-92006		 CWE-20 High
No
No
 - 15.09.2026 SB2026091579
SB20260917225
SB20260921168
and 8 more
#VU146525 - Integer overflow
CVE-2026-89157		 CWE-190 Low
No
No
 - 31.08.2026 SB20260831132
SB2026101001
#VU144097 - Improper Access Control
CVE-2026-75874		 CWE-284 High
No
No
 - 18.08.2026 SB2026081838
SB2026081989
SB2026082141
and 12 more
#VU138995 - Improper Privilege Management
CVE-2026-16365		 CWE-269 High
No
No
 - 22.07.2026 SB2026072201
SB2026072302
SB2026090308
and 10 more
#VU135863 - Authentication Bypass by Capture-replay
CVE-2026-55955		 CWE-294 Medium
No
No
 - 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 7 more
#VU131177 - Improper Access Control
CVE-2026-43515		 CWE-284 Medium
Public exploit available
No
 - 12.05.2026 SB2026051281
SB2026051592
SB2026060605
and 30 more


Showing elements 1 - 20 out of 2912