Known vulnerabilities in Anolis OS 8

Vendor: OpenAnolis
Software: Anolis OS
Version: 8
Software CPE: cpe:2.3:o:openanolis:anolis_os:*:*:*:*:*:*:*:*
Website: https://openanolis.cn/
Total vulnerabilities: 5053
Public exploits: 225
Known exploited (KEV): 72
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Anolis OS version 8 Anolis OS 8 is affected by 5053 vulnerabilities: 37 critical, 833 high, 1859 medium, 2324 low Critical High Medium Low

Vulnerabilities (5053)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139440 - Out-of-bounds read
CVE-2026-64496		 CWE-125 Low
No
No
 - 27.07.2026 SB2026072762
SB2026080729
SB2026081030
and 2 more
#VU139214 - Improper input validation
CVE-2026-10723		 CWE-20 Medium
No
No
 - 23.07.2026 SB2026072347
SB2026072441
SB2026073103
and 21 more
#VU139212 - Improper Check or Handling of Exceptional Conditions
CVE-2026-11331		 CWE-703 Medium
No
No
 - 23.07.2026 SB2026072347
SB2026072441
SB2026073103
and 19 more
#VU139210 - Resource exhaustion
CVE-2026-11622		 CWE-400 Medium
No
No
 - 23.07.2026 SB2026072347
SB2026072441
SB2026073103
and 24 more
#VU139209 - Improper input validation
CVE-2026-11721		 CWE-20 Medium
No
No
 - 23.07.2026 SB2026072347
SB2026072441
SB2026073103
and 24 more
#VU139207 - Reachable Assertion
CVE-2026-13204		 CWE-617 Medium
No
No
 - 23.07.2026 SB2026072347
SB2026072441
SB2026073103
and 23 more
#VU139206 - Improper input validation
CVE-2026-13321		 CWE-20 Low
No
No
 - 23.07.2026 SB2026072347
SB2026072441
SB2026073103
and 24 more
#VU135701 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-59858		 CWE-94 Medium
No
No
 - 29.06.2026 SB2026062908
SB20260715103
SB2026072526
and 5 more
#VU135451 - Use After Free
CVE-2026-52923		 CWE-416 Low
No
No
 - 25.06.2026 SB20260625263
SB2026070835
SB2026070840
and 86 more
#VU135349 - Double Free
CVE-2026-53009		 CWE-415 Low
No
No
 - 25.06.2026 SB20260625159
SB20260721107
SB20260721109
and 11 more
#VU134978 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-57456		 CWE-94 High
No
No
 - 22.06.2026 SB2026062216
SB2026070315
SB2026071933
and 3 more
#VU134977 - Out-of-bounds write
CVE-2026-57455		 CWE-787 Low
No
No
 - 22.06.2026 SB2026062215
SB2026070315
SB2026071933
and 3 more
#VU134580 - Out-of-bounds write
CVE-2026-55693		 CWE-787 Medium
No
No
 - 16.06.2026 SB2026061605
SB2026070315
SB2026070617
and 6 more
#VU132500 - Heap-based Buffer Overflow
CVE-2026-45991		 CWE-122 Low
No
No
 - 28.05.2026 SB2026052887
SB2026061292
SB2026070281
and 19 more
#VU131638 - Improper Access Control
CVE-2026-33377		 CWE-284 Low
No
No
 - 18.05.2026 SB2026051824
SB2026081226
SB2026081241
and 3 more
#VU131454 - Missing Authorization
CVE-2026-6472		 CWE-862 Low
No
No
 - 14.05.2026 SB20260514106
SB20260514108
SB20260514109
and 27 more
#VU131456 - Use of Externally-Controlled Format String
CVE-2026-6474		 CWE-134 Low
No
No
 - 14.05.2026 SB20260514106
SB20260514108
SB20260514109
and 26 more
#VU131461 - Uncontrolled Recursion
CVE-2026-6479		 CWE-674 Medium
No
No
 - 14.05.2026 SB20260514106
SB20260514108
SB20260514109
and 30 more
#VU131463 - Stack-based buffer overflow
CVE-2026-6637		 CWE-121 Medium
No
No
 - 14.05.2026 SB20260514106
SB20260514108
SB20260514109
and 29 more
#VU131218 - Improper Privilege Management
CVE-2025-54518		 CWE-269 Low
No
No
 - 12.05.2026 SB20260512104
SB2026051316
SB2026051320
and 87 more


Showing elements 1 - 20 out of 5053