Known vulnerabilities in Anolis OS 23 - page 40

Vendor: OpenAnolis
Software: Anolis OS
Version: 23
Software CPE: cpe:2.3:o:openanolis:anolis_os:*:*:*:*:*:*:*:*
Website: https://openanolis.cn/
Total vulnerabilities: 2912
Public exploits: 140
Known exploited (KEV): 31
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Anolis OS version 23 Anolis OS 23 is affected by 2912 vulnerabilities: 21 critical, 456 high, 1070 medium, 1365 low Critical High Medium Low

Vulnerabilities (2912)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU127433 - Reachable Assertion
CVE-2025-68471		 CWE-617 Medium
No
No
 - 24.04.2026 SB2026012625
SB2026042419
SB2026042420
and 5 more
#VU127432 - Reachable Assertion
CVE-2025-68468		 CWE-617 Medium
No
No
 - 24.04.2026 SB2026012625
SB2026042419
SB2026042420
and 5 more
#VU127431 - Reachable Assertion
CVE-2025-68276		 CWE-617 Low
No
No
 - 24.04.2026 SB2026012625
SB2026042419
SB2026042420
and 6 more
#VU127046 - Improper input validation
CVE-2026-27135		 CWE-20 Medium
No
No
 - 23.04.2026 SB2026042395
SB20260423101
SB20260423102
and 37 more
#VU125895 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-40176		 CWE-78 High
No
No
 - 14.04.2026 SB2026041445
SB2026041481
SB2026041482
and 8 more
#VU125894 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-40261		 CWE-78 High
No
No
 - 14.04.2026 SB2026041445
SB2026041481
SB2026041482
and 8 more
#VU125830 - Out-of-bounds read
CVE-2026-39979		 CWE-125 High
Public exploit available
No
 - 13.04.2026 SB2026041326
SB2026041653
SB20260417125
and 22 more
#VU125747 - Improper Encoding or Escaping of Output
CVE-2026-34483		 CWE-116 Medium
No
No
 - 09.04.2026 SB20260409110
SB20260417131
SB20260422214
and 21 more
#VU125744 - Improper Certificate Validation
CVE-2026-34500		 CWE-295 Low
No
No
 - 09.04.2026 SB20260409110
SB20260417131
SB20260422214
and 14 more
#VU125745 - Information Exposure Through Log Files
CVE-2026-34487		 CWE-532 Medium
No
No
 - 09.04.2026 SB20260409110
SB20260417131
SB20260422214
and 21 more
#VU125746 - Protection Mechanism Failure
CVE-2026-34486		 CWE-693 Medium
No
Exploited
 - 09.04.2026 SB20260409110
SB20260417131
SB20260422214
and 14 more
#VU125743 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-24880		 CWE-444 Medium
No
No
 - 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 19 more
#VU125740 - Improper Certificate Validation
CVE-2026-29145		 CWE-295 Low
No
No
 - 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 18 more
#VU125741 - Configuration
CVE-2026-29129		 CWE-16 Medium
No
No
 - 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 13 more
#VU125331 - Integer overflow
CVE-2026-34380		 CWE-190 Medium
No
No
 - 08.04.2026 SB2026040875
SB2026040885
SB2026040886
and 10 more
#VU125037 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-34982		 CWE-78 High
No
No
 - 07.04.2026 SB2026040792
SB2026041439
SB20260417153
and 15 more
#VU124153 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-33412		 CWE-78 Medium
No
No
 - 20.03.2026 SB2026032022
SB20260325108
SB20260325109
and 23 more
#VU123645 - Out-of-bounds write
CVE-2026-2922		 CWE-787 High
No
No
 - 09.03.2026 SB2026030940
SB2026032502
SB2026032793
and 8 more
#VU118818 - Resource exhaustion
CVE-2025-58436		 CWE-400 Low
No
No
 - 27.11.2025 SB2025112765
SB2025112856
SB2025120406
and 16 more
#VU118817 - Out-of-bounds write
CVE-2025-61915		 CWE-787 Low
No
No
 - 27.11.2025 SB2025112765
SB2025112772
SB2025112855
and 14 more


Showing elements 781 - 800 out of 2912