Known vulnerabilities in openSUSE Leap - page 9

Vendor: SUSE
Software: openSUSE Leap
Software CPE: cpe:2.3:o:suse:opensuse_leap:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 12331
Public exploits: 252
Known exploited (KEV): 60
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openSUSE Leap openSUSE Leap is affected by 12331 known vulnerabilities: 38 critical, 1037 high, 2248 medium, 9006 low Critical High Medium Low

Vulnerabilities (12331)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139533 - Use After Free
CVE-2026-59850		 CWE-416 Low
No
No
 - 27.07.2026 SB20260727145
SB20260728153
SB2026080402
and 7 more
#VU138176 - Out-of-bounds write
CVE-2026-53366		 CWE-787 Low
No
No
 - 17.07.2026 SB2026071711
SB20260721153
SB2026072208
and 16 more
#VU136962 - Use After Free
CVE-2026-53359		 CWE-416 Low
No
No
 - 07.07.2026 SB2026070736
SB2026070739
SB2026070740
and 90 more
#VU134864 - Out-of-bounds read
CVE-2026-48142		 CWE-125 Medium
No
No
 - 18.06.2026 SB2026061844
SB2026061845
SB2026061846
and 10 more
#VU134861 - Heap-based Buffer Overflow
CVE-2026-42055		 CWE-122 High
No
No
 - 18.06.2026 SB2026061844
SB2026061845
SB2026061846
and 12 more
#VU133992 - Allocation of Resources Without Limits or Throttling
CVE-2026-54273		 CWE-770 Medium
No
No
 - 09.06.2026 SB2026060921
SB2026070626
SB2026070627
and 2 more
#VU133988 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-50269		 CWE-113 Medium
No
No
 - 09.06.2026 SB2026060241
SB2026072492
SB2026072493
#VU133242 - Deserialization of Untrusted Data
CVE-2026-34993		 CWE-502 Medium
No
No
 - 02.06.2026 SB2026060241
SB2026060556
SB2026060557
and 4 more
#VU133241 - Improper Access Control
CVE-2026-47265		 CWE-284 Medium
No
No
 - 02.06.2026 SB2026060241
SB2026060556
SB2026060557
and 2 more
#VU128879 - Out-of-bounds read
CVE-2026-43038		 CWE-125 Medium
No
No
 - 02.05.2026 SB2026050230
SB2026051411
SB2026060229
and 75 more
#VU127955 - Allocation of Resources Without Limits or Throttling
CVE-2026-22815		 CWE-770 Medium
No
No
 - 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU127954 - Resource exhaustion
CVE-2026-34513		 CWE-400 Medium
No
No
 - 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 7 more
#VU127953 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-34514		 CWE-93 Medium
No
No
 - 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 7 more
#VU127951 - Improper input validation
CVE-2026-34516		 CWE-20 Medium
No
No
 - 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 7 more
#VU127950 - Resource exhaustion
CVE-2026-34517		 CWE-400 Medium
No
No
 - 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU127949 - Exposure of sensitive information to an unauthorized actor
CVE-2026-34518		 CWE-200 Medium
No
No
 - 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU127948 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-34519		 CWE-113 Medium
No
No
 - 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU127947 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-34520		 CWE-113 Medium
No
No
 - 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU127946 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-34525		 CWE-444 Low
No
No
 - 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU120227 - Allocation of Resources Without Limits or Throttling
CVE-2025-59529		 CWE-770 Low
No
No
 - 19.12.2025 SB2025121947
SB2026060926
SB2026072540
and 2 more


Showing elements 161 - 180 out of 12331