Known vulnerabilities in openSUSE Leap - page 43

Vendor: SUSE
Software: openSUSE Leap
Software CPE: cpe:2.3:o:suse:opensuse_leap:*:*:*:*:*:*:*:*
Total vulnerabilities: 12987
Public exploits: 262
Known exploited (KEV): 65
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openSUSE Leap openSUSE Leap is affected by 12987 known vulnerabilities: 38 critical, 1147 high, 2543 medium, 9257 low Critical High Medium Low

Vulnerabilities (12987)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140622 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-39822
CWE-59 Low
No
No
- 31.07.2026 SB2026073128
SB20260731126
SB20260731127
and 9 more
#VU140621 - Exposure of sensitive information to an unauthorized actor
CVE-2026-42505
CWE-200 Medium
No
No
- 31.07.2026 SB2026073128
SB20260731146
SB20260731147
and 5 more
#VU140620 - Resource exhaustion
CVE-2026-27145
CWE-400 Medium
No
No
- 31.07.2026 SB2026073127
SB2026073129
SB2026073130
and 45 more
#VU140619 - Resource exhaustion
CVE-2026-42504
CWE-400 Medium
No
No
- 31.07.2026 SB2026073127
SB20260731138
SB20260731143
and 12 more
#VU140618 - Improper Output Neutralization for Logs
CVE-2026-42507
CWE-117 Medium
No
No
- 31.07.2026 SB2026073127
SB20260731115
SB20260731143
and 6 more
#VU140607 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-32282
CWE-367 Low
No
No
- 31.07.2026 SB2026073125
SB2026073160
SB2026073161
and 51 more
#VU140014 - Out-of-bounds write
CVE-2026-62434
CWE-787 Low
No
No
- 29.07.2026 SB2026072966
SB2026073008
SB2026073052
and 8 more
#VU139213 - Improper input validation
CVE-2026-10822
CWE-20 Medium
No
No
- 23.07.2026 SB2026072347
SB2026072441
SB2026073103
and 9 more
#VU139208 - Improper Check for Unusual or Exceptional Conditions
CVE-2026-12617
CWE-754 Medium
No
No
- 23.07.2026 SB2026072347
SB2026072441
SB2026073103
and 10 more
#VU137407 - Insufficient Technical Documentation
CVE-2026-59084
CWE-1059 Low
No
No
- 14.07.2026 SB2026071451
SB2026072515
SB2026073050
and 12 more
#VU137408 - Incorrect Behavior Order: Validate Before Canonicalize
CVE-2026-59083
CWE-180 Medium
No
No
- 14.07.2026 SB2026071451
SB2026072515
SB2026073050
and 13 more
#VU135702 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-59856
CWE-94 High
No
No
- 29.06.2026 SB2026062909
SB20260715103
SB2026072430
and 6 more
#VU135701 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-59858
CWE-94 Medium
No
No
- 29.06.2026 SB2026062908
SB20260715103
SB2026072526
and 10 more
#VU135167 - Out-of-bounds write
CVE-2026-59857
CWE-787 Low
No
No
- 25.06.2026 SB2026062530
SB20260715103
SB2026072526
and 7 more
#VU134864 - Out-of-bounds read
CVE-2026-48142
CWE-125 Medium
No
No
- 18.06.2026 SB2026061844
SB2026061845
SB2026061846
and 10 more
#VU134861 - Heap-based Buffer Overflow
CVE-2026-42055
CWE-122 High
No
No
- 18.06.2026 SB2026061844
SB2026061845
SB2026061846
and 13 more
#VU131976 - Use of Uninitialized Resource
CVE-2026-32814
CWE-908 Medium
No
No
- 20.05.2026 SB2026052069
SB20260731145
#VU124117 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-27142
CWE-79 Medium
No
No
- 19.03.2026 SB2026031903
SB2026031904
SB2026031905
and 16 more
#VU124118 - Improper input validation
CVE-2026-25679
CWE-20 Medium
No
No
- 19.03.2026 SB2026031903
SB2026031904
SB2026031905
and 136 more
#VU124119 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-27139
CWE-22 Low
No
No
- 19.03.2026 SB2026031903
SB2026031904
SB2026031905
and 14 more


Showing elements 841 - 860 out of 12987