Known vulnerabilities in SUSE Linux Enterprise Server 15

Vendor: SUSE
Software: SUSE Linux Enterprise Server 15
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_15:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 13023
Public exploits: 249
Known exploited (KEV): 60
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server 15 SUSE Linux Enterprise Server 15 is affected by 13023 known vulnerabilities: 36 critical, 937 high, 2286 medium, 9762 low Critical High Medium Low

Vulnerabilities (13023)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU149939 - Improper Validation of Specified Quantity in Input
CVE-2026-82397		 CWE-1284 Medium
No
No
 - 15.09.2026 SB2026091516
SB2026091526
SB2026091527
#VU149936 - Exposure of sensitive information to an unauthorized actor
CVE-2026-49853		 CWE-200 Low
No
No
 - 15.09.2026 SB2026091514
SB2026091521
SB2026091522
and 3 more
#VU149935 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-49855		 CWE-409 Medium
No
No
 - 15.09.2026 SB2026091514
SB2026091521
SB2026091522
and 3 more
#VU149934 - Buffer over-read
CVE-2026-49854		 CWE-126 Medium
No
No
 - 15.09.2026 SB2026091514
SB2026091521
SB2026091522
and 3 more
#VU137692 - Out-of-bounds write
CVE-2026-62363		 CWE-787 Medium
No
No
 - 15.07.2026 SB2026071306
SB2026072521
SB2026072523
and 3 more
#VU137368 - Missing release of memory after effective lifetime
CVE-2026-66011		 CWE-401 Medium
No
No
 - 13.07.2026 SB2026071306
SB20260914107
SB20260914108
and 3 more
#VU135699 - Heap-based Buffer Overflow
CVE-2026-61464		 CWE-122 Low
No
No
 - 29.06.2026 SB2026051818
SB20260914129
SB20260914130
and 3 more
#VU135689 - Missing release of memory after effective lifetime
CVE-2026-61871		 CWE-401 Low
No
No
 - 29.06.2026 SB2026051818
SB20260914131
#VU135673 - Use After Free
CVE-2026-61860		 CWE-416 Low
No
No
 - 29.06.2026 SB2026051818
SB20260914131
SB20260914133
#VU135671 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-61859		 CWE-59 Low
No
No
 - 29.06.2026 SB2026051818
SB20260914130
SB20260914131
and 1 more
#VU135670 - Missing Authorization
CVE-2026-55628		 CWE-862 Low
No
No
 - 29.06.2026 SB2026051818
SB2026070618
SB2026070619
and 7 more
#VU135669 - Missing Authorization
CVE-2026-61858		 CWE-862 Low
No
No
 - 29.06.2026 SB2026051818
SB20260914102
SB20260914103
and 6 more
#VU135668 - Use After Free
CVE-2026-61857		 CWE-416 Low
No
No
 - 29.06.2026 SB2026051818
SB20260914102
SB20260914103
and 7 more
#VU135664 - Allocation of Resources Without Limits or Throttling
CVE-2026-61465		 CWE-770 Low
No
No
 - 29.06.2026 SB2026051818
SB20260914102
SB20260914103
and 6 more
#VU133103 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-56377		 CWE-367 Low
No
No
 - 31.05.2026 SB2026051818
SB2026091498
SB20260914129
and 3 more
#VU125876 - Heap-based Buffer Overflow
CVE-2026-56372		 CWE-122 Low
No
No
 - 14.04.2026 SB2026041434
SB20260914103
SB20260914104
and 5 more
#VU124427 - Missing release of memory after effective lifetime
CVE-2026-56375		 CWE-401 Medium
No
No
 - 25.03.2026 SB2026032534
SB20260914130
SB20260914131
and 1 more
#VU124424 - Missing release of memory after effective lifetime
CVE-2026-56366		 CWE-401 Medium
No
No
 - 25.03.2026 SB2026032535
SB20260914102
SB20260914104
and 6 more
#VU123262 - Use After Free
CVE-2026-56373		 CWE-416 Medium
No
No
 - 25.02.2026 SB2026022540
SB20260914102
SB20260914104
and 6 more
#VU123228 - Out-of-bounds read
CVE-2026-56362		 CWE-125 Low
No
No
 - 25.02.2026 SB2026022540
SB20260914129
SB20260914130
and 2 more


Showing elements 1 - 20 out of 13023