Known vulnerabilities in Anolis OS 23 - page 4

Vendor: OpenAnolis
Software: Anolis OS
Version: 23
Software CPE: cpe:2.3:o:openanolis:anolis_os:*:*:*:*:*:*:*:*
Website: https://openanolis.cn/
Total vulnerabilities: 2912
Public exploits: 140
Known exploited (KEV): 31
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Anolis OS version 23 Anolis OS 23 is affected by 2912 vulnerabilities: 21 critical, 456 high, 1070 medium, 1365 low Critical High Medium Low

Vulnerabilities (2912)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU153168 - Buffer over-read
CVE-2026-6238		 CWE-126 Medium
No
No
 - 02.10.2026 SB2026100230
SB2026100235
SB2026100236
and 9 more
#VU153035 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-11940		 CWE-22 High
No
No
 - 01.10.2026 SB2026100109
SB2026100111
SB2026100113
and 8 more
#VU151513 - Reachable Assertion
CVE-2026-8674		 CWE-617 Medium
No
No
 - 21.09.2026 SB2026091570
SB2026100904
#VU150672 - Inefficient Algorithmic Complexity
CVE-2026-92091		 CWE-407 Medium
No
No
 - 17.09.2026 SB20260917228
SB20260925204
SB2026100911
#VU150232 - Insufficient Verification of Data Authenticity
CVE-2026-19033		 CWE-345 Medium
No
No
 - 16.09.2026 SB2026091658
SB2026091801
SB2026093044
and 1 more
#VU150230 - Resource exhaustion
CVE-2026-75029		 CWE-400 Medium
No
No
 - 16.09.2026 SB2026091658
SB2026091801
SB2026093044
and 1 more
#VU150229 - Insufficient Verification of Data Authenticity
CVE-2026-77119		 CWE-345 Medium
No
No
 - 16.09.2026 SB2026091658
SB2026091801
SB2026093044
and 1 more
#VU150228 - Improper input validation
CVE-2026-80274		 CWE-20 Medium
No
No
 - 16.09.2026 SB2026091658
SB2026091801
SB2026093044
and 8 more
#VU150227 - Missing release of memory after effective lifetime
CVE-2026-81563		 CWE-401 Medium
No
No
 - 16.09.2026 SB2026091658
SB2026091801
SB2026093044
and 4 more
#VU150226 - Use After Free
CVE-2026-19662		 CWE-416 Medium
No
No
 - 16.09.2026 SB2026091658
SB2026091801
SB2026093044
and 1 more
#VU150225 - Use After Free
CVE-2026-19666		 CWE-416 Medium
No
No
 - 16.09.2026 SB2026091658
SB2026091801
SB2026093044
and 4 more
#VU150223 - Insufficient Verification of Data Authenticity
CVE-2026-19941		 CWE-345 Medium
No
No
 - 16.09.2026 SB2026091658
SB2026093044
SB2026100909
#VU150220 - Improper input validation
CVE-2026-78301		 CWE-20 Low
No
No
 - 16.09.2026 SB2026091658
SB2026093044
SB2026100909
#VU150219 - Resource exhaustion
CVE-2026-81736		 CWE-400 Medium
No
No
 - 16.09.2026 SB2026091658
SB2026091801
SB2026093044
and 4 more
#VU150193 - Out-of-bounds write
CVE-2026-81642		 CWE-787 High
No
No
 - 16.09.2026 SB2026091646
SB2026091655
SB2026091656
and 13 more
#VU150094 - Improper input validation
CVE-2026-92076		 CWE-20 Medium
No
No
 - 15.09.2026 SB2026091579
SB20260921173
SB20260921183
and 1 more
#VU146523 - Out-of-bounds read
CVE-2026-89156		 CWE-125 Low
No
No
 - 31.08.2026 SB20260831132
SB2026100908
#VU139259 - Heap-based Buffer Overflow
CVE-2026-73074		 CWE-122 Low
No
No
 - 24.07.2026 SB2026072421
SB2026082207
SB2026082208
and 3 more
#VU135701 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-59858		 CWE-94 Medium
No
No
 - 29.06.2026 SB2026062908
SB20260715103
SB2026072526
and 10 more
#VU111967 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-4330		 CWE-59 High
No
No
 - 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 66 more


Showing elements 61 - 80 out of 2912