Known vulnerabilities in openSUSE Leap - page 24

Vendor: SUSE
Software: openSUSE Leap
Software CPE: cpe:2.3:o:suse:opensuse_leap:*:*:*:*:*:*:*:*
Total vulnerabilities: 12331
Public exploits: 252
Known exploited (KEV): 60
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openSUSE Leap openSUSE Leap is affected by 12331 known vulnerabilities: 38 critical, 1037 high, 2248 medium, 9006 low Critical High Medium Low

Vulnerabilities (12331)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU133359 - Use After Free
CVE-2026-41035
CWE-416 Medium
No
No
- 04.06.2026 SB2026060475
SB2026060476
SB2026060477
and 21 more
#VU133144 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-29518
CWE-367 Low
No
No
- 01.06.2026 SB2026060174
SB2026060175
SB2026060184
and 18 more
#VU133145 - Improper Access Control
CVE-2026-43617
CWE-284 Medium
No
No
- 01.06.2026 SB2026060174
SB2026060175
SB2026060184
and 14 more
#VU133146 - Integer overflow
CVE-2026-43618
CWE-190 Low
No
No
- 01.06.2026 SB2026060174
SB2026060175
SB2026060184
and 24 more
#VU133147 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-43619
CWE-59 Low
No
No
- 01.06.2026 SB2026060174
SB2026060175
SB2026060184
and 13 more
#VU133148 - Out-of-bounds read
CVE-2026-43620
CWE-125 Medium
No
No
- 01.06.2026 SB2026060174
SB2026060175
SB2026060184
and 18 more
#VU133149 - Off-by-one Error
CVE-2026-45232
CWE-193 Medium
No
No
- 01.06.2026 SB2026060174
SB2026060175
SB2026060184
and 20 more
#VU131932 - Resource exhaustion
CVE-2026-44390
CWE-400 Medium
No
No
- 20.05.2026 SB2026052056
SB2026052088
SB2026052089
and 16 more
#VU131931 - Insufficient Verification of Data Authenticity
CVE-2026-42960
CWE-345 Medium
No
No
- 20.05.2026 SB2026052056
SB2026052088
SB2026052089
and 13 more
#VU131923 - Use After Free
CVE-2026-44608
CWE-416 Medium
No
No
- 20.05.2026 SB2026052056
SB2026052088
SB2026052089
and 10 more
#VU128368 - Uncontrolled Memory Allocation
CVE-2026-42154
CWE-789 Medium
No
No
- 28.04.2026 SB20260428200
SB2026060464
SB2026060465
and 2 more
#VU128367 - Exposure of sensitive information to an unauthorized actor
CVE-2026-42151
CWE-200 Medium
No
No
- 28.04.2026 SB20260428200
SB2026060464
SB2026060465
and 1 more
#VU125945 - Improper input validation
CVE-2026-34986
CWE-20 Medium
No
No
- 14.04.2026 SB2026041463
SB2026041464
SB2026041465
and 73 more
#VU125920 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-40179
CWE-79 Low
No
No
- 14.04.2026 SB2026041458
SB2026060464
SB2026060465
#VU124711 - Exposure of sensitive information to an unauthorized actor
CVE-2026-27877
CWE-200 Low
No
No
- 31.03.2026 SB2026033194
SB2026042431
SB2026042902
and 2 more
#VU124710 - Improper input validation
CVE-2026-33375
CWE-20 Low
No
No
- 31.03.2026 SB2026033194
SB2026060464
#VU124709 - Improper Authorization
CVE-2026-21724
CWE-285 Low
No
No
- 31.03.2026 SB2026033194
SB2026060464
#VU124708 - Improper input validation
CVE-2026-28375
CWE-20 Low
No
No
- 31.03.2026 SB2026033194
SB2026060464
#VU124706 - Uncontrolled Memory Allocation
CVE-2026-27879
CWE-789 Low
No
No
- 31.03.2026 SB2026033194
SB2026060464
#VU124705 - Improper input validation
CVE-2026-27876
CWE-20 Low
No
No
- 31.03.2026 SB2026033194
SB2026060464


Showing elements 461 - 480 out of 12331