Known vulnerabilities in Anolis OS 23 - page 8

Vendor: OpenAnolis
Software: Anolis OS
Version: 23
Software CPE: cpe:2.3:o:openanolis:anolis_os:*:*:*:*:*:*:*:*
Website: https://openanolis.cn/
Total vulnerabilities: 2912
Public exploits: 140
Known exploited (KEV): 31
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Anolis OS version 23 Anolis OS 23 is affected by 2912 vulnerabilities: 21 critical, 456 high, 1070 medium, 1365 low Critical High Medium Low

Vulnerabilities (2912)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU149934 - Buffer over-read
CVE-2026-49854		 CWE-126 Medium
No
No
 - 15.09.2026 SB2026091514
SB2026091521
SB2026091522
and 4 more
#VU142277 - Incorrect Authorization
CVE-2026-70463		 CWE-863 Medium
No
No
 - 13.08.2026 SB2026081362
SB2026081821
SB2026082074
and 9 more
#VU139227 - Use of Insufficiently Random Values
CVE-2026-50252		 CWE-330 Medium
No
No
 - 23.07.2026 SB2026072350
SB20260727391
SB2026080743
and 6 more
#VU136613 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-59946		 CWE-22 Medium
No
No
 - 01.07.2026 SB2026070158
SB20260721146
SB2026092141
and 2 more
#VU136612 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-59948		 CWE-22 Medium
No
No
 - 01.07.2026 SB2026070158
SB20260721146
SB2026092141
and 2 more
#VU136611 - Information Exposure Through Log Files
CVE-2026-59947		 CWE-532 Low
No
No
 - 01.07.2026 SB2026070158
SB20260721146
SB2026092141
and 3 more
#VU135676 - Out-of-bounds read
CVE-2026-61862		 CWE-125 Low
No
No
 - 29.06.2026 SB2026051818
SB20260914129
SB20260914130
and 3 more
#VU135674 - Use After Free
CVE-2026-61861		 CWE-416 Low
No
No
 - 29.06.2026 SB2026051818
SB20260914102
SB20260914103
and 7 more
#VU135673 - Use After Free
CVE-2026-61860		 CWE-416 Low
No
No
 - 29.06.2026 SB2026051818
SB20260914131
SB20260914133
and 1 more
#VU135671 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-61859		 CWE-59 Low
No
No
 - 29.06.2026 SB2026051818
SB20260914130
SB20260914131
and 2 more
#VU135670 - Missing Authorization
CVE-2026-55628		 CWE-862 Low
No
No
 - 29.06.2026 SB2026051818
SB2026070618
SB2026070619
and 8 more
#VU135669 - Missing Authorization
CVE-2026-61858		 CWE-862 Low
No
No
 - 29.06.2026 SB2026051818
SB20260914102
SB20260914103
and 7 more
#VU135668 - Use After Free
CVE-2026-61857		 CWE-416 Low
No
No
 - 29.06.2026 SB2026051818
SB20260914102
SB20260914103
and 10 more
#VU135664 - Allocation of Resources Without Limits or Throttling
CVE-2026-61465		 CWE-770 Low
No
No
 - 29.06.2026 SB2026051818
SB20260914102
SB20260914103
and 9 more
#VU133142 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-52858		 CWE-94 Medium
No
No
 - 01.06.2026 SB2026060172
SB20260619120
SB2026062488
and 8 more
#VU131591 - Integer overflow
CVE-2026-56363		 CWE-190 Low
No
No
 - 16.05.2026 SB2026051608
SB2026091498
SB20260914124
and 4 more
#VU125878 - Out-of-bounds read
CVE-2026-56374		 CWE-125 Low
No
No
 - 14.04.2026 SB2026041434
SB20260914124
SB20260914125
and 1 more
#VU125876 - Heap-based Buffer Overflow
CVE-2026-56372		 CWE-122 Low
No
No
 - 14.04.2026 SB2026041434
SB20260914103
SB20260914104
and 6 more
#VU124427 - Missing release of memory after effective lifetime
CVE-2026-56375		 CWE-401 Medium
No
No
 - 25.03.2026 SB2026032534
SB20260914130
SB20260914131
and 2 more
#VU124424 - Missing release of memory after effective lifetime
CVE-2026-56366		 CWE-401 Medium
No
No
 - 25.03.2026 SB2026032535
SB20260914102
SB20260914104
and 9 more


Showing elements 141 - 160 out of 2912