Known vulnerabilities in Anolis OS 23 - page 39

Vendor: OpenAnolis
Software: Anolis OS
Version: 23
Software CPE: cpe:2.3:o:openanolis:anolis_os:*:*:*:*:*:*:*:*
Website: https://openanolis.cn/
Total vulnerabilities: 2912
Public exploits: 140
Known exploited (KEV): 31
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Anolis OS version 23 Anolis OS 23 is affected by 2912 vulnerabilities: 21 critical, 456 high, 1070 medium, 1365 low Critical High Medium Low

Vulnerabilities (2912)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU127932 - Improper Certificate Validation
CVE-2026-24122		 CWE-295 Low
No
No
 - 25.04.2026 SB20260425214
SB20260425221
#VU127931 - Insufficient Verification of Data Authenticity
CVE-2026-22703		 CWE-345 Low
No
No
 - 25.04.2026 SB20260425213
SB20260425220
#VU125785 - Improper Validation of Unsafe Equivalence in Input
CVE-2026-34080		 CWE-1289 Medium
No
No
 - 10.04.2026 SB2026041070
SB2026041403
SB2026041438
and 12 more
#VU125663 - Reachable Assertion
CVE-2026-34933		 CWE-617 Low
No
No
 - 09.04.2026 SB2026040975
SB2026041133
SB20260417120
and 10 more
#VU125564 - Use After Free
CVE-2026-28387		 CWE-416 High
No
No
 - 09.04.2026 SB2026040943
SB2026040944
SB2026040945
and 30 more
#VU125332 - Type conversion
CVE-2026-34379		 CWE-704 Medium
No
No
 - 08.04.2026 SB2026040875
SB2026040885
SB2026040886
and 8 more
#VU125327 - Out-of-bounds write
CVE-2026-34544		 CWE-787 High
No
No
 - 08.04.2026 SB2026040875
SB2026040882
SB2026040883
and 4 more
#VU125326 - Use of Uninitialized Resource
CVE-2026-34543		 CWE-908 Medium
No
No
 - 08.04.2026 SB2026040875
SB2026040882
SB2026040883
and 1 more
#VU125296 - Improper Access Control
CVE-2026-34078		 CWE-284 High
No
No
 - 08.04.2026 SB2026040858
SB2026040865
SB2026040866
and 29 more
#VU125295 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-34079		 CWE-22 Low
No
No
 - 08.04.2026 SB2026040858
SB2026040865
SB2026040866
and 29 more
#VU125292 - Heap-based Buffer Overflow
CVE-2026-20889		 CWE-122 High
No
No
 - 08.04.2026 SB2026040857
SB20260408160
SB20260408161
and 7 more
#VU124852 - Out-of-bounds read
CVE-2025-66037		 CWE-125 Low
No
No
 - 02.04.2026 SB2026040263
SB2026040270
SB2026040271
and 5 more
#VU124851 - Buffer over-read
CVE-2025-66038		 CWE-126 Low
No
No
 - 02.04.2026 SB2026040263
SB2026040270
SB2026040271
and 3 more
#VU124850 - Stack-based buffer overflow
CVE-2025-66215		 CWE-121 Low
No
No
 - 02.04.2026 SB2026040263
SB2026040270
SB2026040271
and 3 more
#VU124848 - Stack-based buffer overflow
CVE-2025-49010		 CWE-121 Low
No
No
 - 02.04.2026 SB2026040263
SB2026040270
SB2026040271
and 5 more
#VU124785 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-27456		 CWE-362 Low
No
No
 - 01.04.2026 SB2026040169
SB2026040201
SB2026040202
and 8 more
#VU124627 - Reachable Assertion
CVE-2026-29111		 CWE-617 Low
No
No
 - 26.03.2026 SB2026032630
SB2026033133
SB2026033134
and 11 more
#VU124549 - Improper Access Control
CVE-2026-21716		 CWE-284 Low
No
No
 - 25.03.2026 SB20260325154
SB2026032902
SB20260415182
and 18 more
#VU96049 - UNIX Symbolic Link (Symlink) Following
CVE-2024-42472		 CWE-61 Low
No
No
 - 15.08.2024 SB2024081541
SB2024081542
SB2024081553
and 29 more
#VU93881 - Permissions, Privileges, and Access Controls
CVE-2024-36137		 CWE-264 Low
No
No
 - 09.07.2024 SB2024070937
SB20240717120
SB2024072232
and 23 more


Showing elements 761 - 780 out of 2912