Known vulnerabilities in SUSE Linux Enterprise Desktop 15 - page 73

Vendor: SUSE
Software: SUSE Linux Enterprise Desktop 15
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_desktop_15:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 11175
Public exploits: 178
Known exploited (KEV): 51
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Desktop 15 SUSE Linux Enterprise Desktop 15 is affected by 11175 known vulnerabilities: 31 critical, 916 high, 2103 medium, 8123 low Critical High Medium Low

Vulnerabilities (11175)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139156 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-54515		 CWE-915 Medium
No
No
 - 22.07.2026 SB2026072278
SB2026072282
SB2026072288
and 18 more
#VU139152 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-59888		 CWE-915 Medium
No
No
 - 22.07.2026 SB2026072278
SB2026072413
SB20260728138
and 10 more
#VU139151 - Incorrect Authorization
CVE-2026-59889		 CWE-863 Low
No
No
 - 22.07.2026 SB2026072278
SB2026072413
SB20260728138
and 10 more
#VU137002 - Heap-based Buffer Overflow
CVE-2026-59205		 CWE-122 Medium
No
No
 - 07.07.2026 SB2026070342
SB2026071741
SB2026072428
and 7 more
#VU133992 - Allocation of Resources Without Limits or Throttling
CVE-2026-54273		 CWE-770 Medium
No
No
 - 09.06.2026 SB2026060921
SB2026070626
SB2026070627
and 2 more
#VU133989 - Improper input validation
CVE-2026-54274		 CWE-20 Medium
No
No
 - 09.06.2026 SB2026060921
SB2026070626
SB2026070627
and 2 more
#VU133988 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-50269		 CWE-113 Medium
No
No
 - 09.06.2026 SB2026060241
SB2026072492
SB2026072493
#VU133242 - Deserialization of Untrusted Data
CVE-2026-34993		 CWE-502 Medium
No
No
 - 02.06.2026 SB2026060241
SB2026060556
SB2026060557
and 4 more
#VU133241 - Improper Access Control
CVE-2026-47265		 CWE-284 Medium
No
No
 - 02.06.2026 SB2026060241
SB2026060556
SB2026060557
and 2 more
#VU127955 - Allocation of Resources Without Limits or Throttling
CVE-2026-22815		 CWE-770 Medium
No
No
 - 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU127954 - Resource exhaustion
CVE-2026-34513		 CWE-400 Medium
No
No
 - 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 7 more
#VU127953 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-34514		 CWE-93 Medium
No
No
 - 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 7 more
#VU127951 - Improper input validation
CVE-2026-34516		 CWE-20 Medium
No
No
 - 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 7 more
#VU127950 - Resource exhaustion
CVE-2026-34517		 CWE-400 Medium
No
No
 - 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU127949 - Exposure of sensitive information to an unauthorized actor
CVE-2026-34518		 CWE-200 Medium
No
No
 - 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU127948 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-34519		 CWE-113 Medium
No
No
 - 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU127947 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-34520		 CWE-113 Medium
No
No
 - 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU127946 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-34525		 CWE-444 Low
No
No
 - 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU120227 - Allocation of Resources Without Limits or Throttling
CVE-2025-59529		 CWE-770 Low
No
No
 - 19.12.2025 SB2025121947
SB2026060926
SB2026072540
and 2 more
#VU107932 - Improper input validation
CVE-2024-58251		 CWE-20 Low
No
No
 - 25.04.2025 SB2025042503
SB2025092660
SB2025110432
and 7 more


Showing elements 1441 - 1460 out of 11175