Known vulnerabilities in Anolis OS 23 - page 66

Vendor: OpenAnolis
Software: Anolis OS
Version: 23
Software CPE: cpe:2.3:o:openanolis:anolis_os:*:*:*:*:*:*:*:*
Website: https://openanolis.cn/
Total vulnerabilities: 2912
Public exploits: 140
Known exploited (KEV): 31
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Anolis OS version 23 Anolis OS 23 is affected by 2912 vulnerabilities: 21 critical, 456 high, 1070 medium, 1365 low Critical High Medium Low

Vulnerabilities (2912)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118253 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-26625		 CWE-59 High
No
No
 - 11.11.2025 SB2025111128
SB2025111129
SB2025111130
and 22 more
#VU117878 - Type confusion
CVE-2025-11731		 CWE-843 Medium
No
No
 - 31.10.2025 SB2025103161
SB2025103165
SB2025103167
and 10 more
#VU117839 - Out-of-bounds read
CVE-2025-11683		 CWE-125 Medium
No
No
 - 30.10.2025 SB2025103050
SB2025103051
SB2025103056
and 4 more
#VU117704 - Missing release of memory after effective lifetime
CVE-2025-50949		 CWE-401 Low
No
No
 - 28.10.2025 SB2025102850
SB2025102852
SB2025102853
and 10 more
#VU117689 - Improper Privilege Management
CVE-2025-11561		 CWE-269 Medium
No
No
 - 28.10.2025 SB2025102811
SB2025102813
SB2025102814
and 35 more
#VU117666 - Integer underflow
CVE-2025-62594		 CWE-191 Medium
No
No
 - 27.10.2025 SB2025102711
SB2025103195
SB2025103196
and 7 more
#VU117610 - Insufficient Verification of Data Authenticity
CVE-2025-40778		 CWE-345 Medium
Public exploit available
No
 - 23.10.2025 SB2025102373
SB2025102393
SB20251023133
and 60 more
#VU117483 - Improper input validation
CVE-2025-53066		 CWE-20 Medium
No
No
 - 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 118 more
#VU117484 - Improper input validation
CVE-2025-53057		 CWE-20 Medium
No
No
 - 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 121 more
#VU117368 - Integer overflow
CVE-2025-62171		 CWE-190 Low
No
No
 - 20.10.2025 SB2025102013
SB20251024104
SB20251024105
and 14 more
#VU116609 - Use After Free
CVE-2025-49844		 CWE-416 Medium
Public exploit available
No
 - 06.10.2025 SB2025100629
SB2025100633
SB2025100709
and 57 more
#VU116004 - Integer overflow
CVE-2024-38805		 CWE-190 Medium
No
No
 - 22.09.2025 SB2025080722
SB2025092259
SB2025092260
and 7 more
#VU114417 - Integer overflow
CVE-2025-57803		 CWE-190 Medium
No
No
 - 26.08.2025 SB2025082604
SB2025090583
SB2025090584
and 19 more
#VU112940 - Improper input validation
CVE-2025-30761		 CWE-20 Medium
No
No
 - 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 77 more
#VU112941 - Improper input validation
CVE-2025-30754		 CWE-20 Medium
No
No
 - 16.07.2025 SB2025071686
SB2025071692
SB2025071783
and 108 more
#VU112936 - Improper input validation
CVE-2025-50059		 CWE-20 High
No
No
 - 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 54 more
#VU112937 - Improper input validation
CVE-2025-30749		 CWE-20 High
No
No
 - 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 101 more
#VU112938 - Improper input validation
CVE-2025-50106		 CWE-20 High
No
No
 - 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 100 more
#VU111716 - Insufficiently Protected Credentials
CVE-2024-47081		 CWE-522 Medium
No
No
 - 21.06.2025 SB2025062111
SB2025062112
SB2025062113
and 96 more
#VU103884 - Memory corruption
CVE-2025-23050		 CWE-119 High
No
No
 - 12.02.2025 SB2025021204
SB2025021213
SB2025021214
and 2 more


Showing elements 1301 - 1320 out of 2912