Known vulnerabilities in corepack18 - page 2

Vendor: SUSE
Software: corepack18
Software CPE: cpe:2.3:o:suse:corepack18:*:*:*:*:*:suse_linux:*:*
Website: https://www.suse.com/
Total vulnerabilities: 79
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting corepack18 corepack18 is affected by 79 known vulnerabilities: 2 high, 63 medium, 14 low Critical High Medium Low

Vulnerabilities (79)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140038 - Resource exhaustion
CVE-2026-56846		 CWE-400 Medium
No
No
 18.20.8-150400.9.39.1 29.07.2026 SB2026072975
SB2026083143
SB2026083144
and 11 more
#VU140039 - Use After Free
CVE-2026-56848		 CWE-416 Medium
No
No
 18.20.8-150400.9.39.1 29.07.2026 SB2026072975
SB2026083143
SB2026083144
and 11 more
#VU140040 - Improper Access Control
CVE-2026-58043		 CWE-284 Low
No
No
 18.20.8-150400.9.39.1 29.07.2026 SB2026072975
SB2026083143
SB2026083144
and 9 more
#VU140041 - Authentication Bypass by Primary Weakness
CVE-2026-56850		 CWE-305 Low
No
No
 18.20.8-150400.9.39.1 29.07.2026 SB2026072975
SB20260831126
SB20260831127
and 5 more
#VU140042 - Improper Certificate Validation
CVE-2026-58040		 CWE-295 Medium
No
No
 18.20.8-150400.9.39.1 29.07.2026 SB2026072975
SB20260831126
SB20260831127
and 4 more
#VU140044 - Improper input validation
CVE-2026-58042		 CWE-20 Medium
No
No
 18.20.8-150400.9.39.1 29.07.2026 SB2026072975
SB20260831126
SB20260831127
and 4 more
#VU140045 - Improper input validation
CVE-2026-58045		 CWE-20 Low
No
No
 18.20.8-150400.9.39.1 29.07.2026 SB2026072975
SB20260831126
SB20260831127
and 4 more
#VU140048 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-58044		 CWE-444 Medium
No
No
 18.20.8-150400.9.39.1 29.07.2026 SB2026072975
SB20260831126
SB20260831127
and 4 more
#VU135014 - Integer overflow
CVE-2026-48933		 CWE-190 Medium
No
No
 18.20.8-150400.9.39.1 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 10 more
#VU135019 - Improper Resource Shutdown or Release
CVE-2026-48937		 CWE-404 Medium
No
No
 18.20.8-150400.9.39.1 22.06.2026 SB2026062248
SB20260728134
SB20260921174
and 3 more
#VU135021 - Improper Null Termination
CVE-2026-48930		 CWE-170 Medium
No
No
 18.20.8-150400.9.39.1 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 10 more
#VU135022 - Improper Certificate Validation
CVE-2026-48934		 CWE-295 Medium
No
No
 18.20.8-150400.9.39.1 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 9 more
#VU135023 - Improper Access Control
CVE-2026-48935		 CWE-284 Low
No
No
 18.20.8-150400.9.39.1 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 8 more
#VU135025 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-48931		 CWE-367 Medium
No
No
 18.20.8-150400.9.39.1 22.06.2026 SB2026062248
SB20260728134
SB20260921174
and 3 more
#VU134756 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-9679		 CWE-93 Medium
No
No
 18.20.8-150400.9.39.1 17.06.2026 SB2026061760
SB2026080430
SB2026082715
and 4 more
#VU134751 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-6733		 CWE-367 Low
No
No
 18.20.8-150400.9.39.1 17.06.2026 SB2026061760
SB2026080430
SB2026082715
and 9 more
#VU109241 - Error Handling
CVE-2025-23166		 CWE-388 Medium
No
No
 18.20.8-150400.9.39.1 16.05.2025 SB2025051605
SB2025051901
SB2025051902
and 31 more
#VU103227 - Use of Insufficiently Random Values
CVE-2025-22150		 CWE-330 Medium
No
No
 18.20.6-150400.9.33.1, 18.20.8-150400.9.39.1 22.01.2025 SB2025012259
SB2025012439
SB2025012440
and 29 more
#VU103225 - Missing release of memory after effective lifetime
CVE-2025-23085		 CWE-401 Medium
No
No
 18.20.6-150400.9.33.1 22.01.2025 SB2025012252
SB2025012439
SB2025012440
and 30 more
#VU100921 - Incorrect Regular Expression
CVE-2024-21538		 CWE-185 Medium
No
No
 18.20.5-150400.9.30.1 26.11.2024 SB2024112627
SB2024112629
SB2024120325
and 67 more


Showing elements 21 - 40 out of 79