Known vulnerabilities in openSUSE Leap - page 31

Vendor: SUSE
Software: openSUSE Leap
Software CPE: cpe:2.3:o:suse:opensuse_leap:*:*:*:*:*:*:*:*
Total vulnerabilities: 12987
Public exploits: 262
Known exploited (KEV): 65
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openSUSE Leap openSUSE Leap is affected by 12987 known vulnerabilities: 38 critical, 1147 high, 2543 medium, 9257 low Critical High Medium Low

Vulnerabilities (12987)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU148985 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-4878
CWE-367 Low
No
No
- 11.09.2026 SB2026091127
SB2026091131
SB2026091137
and 14 more
#VU147399 - Missing release of memory after effective lifetime
CVE-2026-62437
CWE-401 Low
No
No
- 08.09.2026 SB2026090845
SB2026090870
SB2026090871
and 3 more
#VU147398 - Improper Check for Unusual or Exceptional Conditions
CVE-2026-79602
CWE-754 Low
No
No
- 08.09.2026 SB2026090845
SB2026090870
SB2026090871
and 3 more
#VU147397 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-79603
CWE-362 Low
No
No
- 08.09.2026 SB2026090845
SB2026090870
SB2026090871
and 2 more
#VU146685 - Improper Restriction of Communication Channel to Intended Endpoints
CVE-2026-13608
CWE-923 Medium
No
No
- 02.09.2026 SB2026090233
SB2026090401
SB20260907132
and 7 more
#VU146682 - Use After Free
CVE-2026-80229
CWE-416 Low
No
No
- 02.09.2026 SB2026090233
SB2026090401
SB20260907132
and 6 more
#VU146681 - Improper Certificate Validation
CVE-2026-80230
CWE-295 Low
No
No
- 02.09.2026 SB2026090233
SB2026090401
SB20260907132
and 9 more
#VU145419 - NULL Pointer Dereference
CVE-2026-14457
CWE-476 Medium
No
No
- 26.08.2026 SB2026082627
SB2026082629
SB2026082636
and 6 more
#VU143975 - Memory corruption
CVE-2026-28984
CWE-119 Low
No
No
- 18.08.2026 SB2026081824
SB2026081827
SB20260831111
and 1 more
#VU143690 - Exposure of sensitive information to an unauthorized actor
CVE-2026-64713
CWE-200 Low
No
No
- 17.08.2026 SB2026081770
SB2026081771
SB2026081772
and 7 more
#VU143695 - Improper control of a resource through its lifetime
CVE-2026-43804
CWE-664 Medium
No
No
- 17.08.2026 SB2026081770
SB2026081771
SB2026081772
and 5 more
#VU143698 - Out-of-bounds write
CVE-2026-64719
CWE-787 Medium
No
No
- 17.08.2026 SB2026081770
SB2026081771
SB2026081772
and 8 more
#VU139893 - Resource exhaustion
CVE-2026-69244
CWE-400 Medium
No
No
- 28.07.2026 SB2026072881
SB20260824258
SB20260824259
and 1 more
#VU139888 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-69243
CWE-444 Medium
No
No
- 28.07.2026 SB2026072882
SB20260824258
SB20260824259
and 4 more
#VU139887 - Improper input validation
CVE-2026-59881
CWE-20 Medium
No
No
- 28.07.2026 SB2026072882
SB2026080738
SB2026080739
and 4 more
#VU135084 - Insufficiently Protected Credentials
CVE-2026-8926
CWE-522 Low
No
No
- 24.06.2026 SB2026062427
SB2026070135
SB2026072507
and 15 more
#VU132966 - Heap-based Buffer Overflow
CVE-2026-50538
CWE-122 High
No
No
- 29.05.2026 SB2026052966
SB20260824112
SB20260824113
and 6 more
#VU128459 - Authentication Bypass by Capture-replay
CVE-2026-7168
CWE-294 Medium
No
No
- 29.04.2026 SB2026042955
SB2026050481
SB2026052287
and 13 more
#VU128451 - Exposure of Data Element to Wrong Session
CVE-2026-5773
CWE-488 Medium
No
No
- 29.04.2026 SB2026042955
SB2026050481
SB2026052032
and 11 more
#VU114264 - Integer overflow
CVE-2025-55154
CWE-190 High
No
No
- 20.08.2025 SB20250820103
SB2025090583
SB2025090584
and 20 more


Showing elements 601 - 620 out of 12987