Known vulnerabilities in openSUSE Leap

Vendor: SUSE
Software: openSUSE Leap
Software CPE: cpe:2.3:o:suse:opensuse_leap:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 12894
Public exploits: 258
Known exploited (KEV): 64
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openSUSE Leap openSUSE Leap is affected by 12894 known vulnerabilities: 38 critical, 1121 high, 2503 medium, 9230 low Critical High Medium Low

Vulnerabilities (12894)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU151590 - Missing release of memory after effective lifetime
CVE-2026-78127		 CWE-401 Medium
No
No
 - 22.09.2026 SB2026092230
SB2026092245
SB2026093056
and 3 more
#VU151589 - Unchecked Input for Loop Condition
CVE-2026-78129		 CWE-606 Medium
No
No
 - 22.09.2026 SB2026092230
SB2026092245
SB2026093056
and 3 more
#VU151588 - NULL Pointer Dereference
CVE-2026-78130		 CWE-476 Medium
No
No
 - 22.09.2026 SB2026092230
SB2026092245
SB2026093056
and 3 more
#VU151587 - Missing release of memory after effective lifetime
CVE-2026-78131		 CWE-401 Medium
No
No
 - 22.09.2026 SB2026092230
SB2026092245
SB2026093056
and 3 more
#VU151586 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-78132		 CWE-835 Medium
No
No
 - 22.09.2026 SB2026092230
SB2026092245
SB2026093056
and 2 more
#VU151584 - Authentication Bypass by Spoofing
CVE-2026-78134		 CWE-290 Low
No
No
 - 22.09.2026 SB2026092230
SB2026092245
SB2026093056
and 2 more
#VU151583 - Improper Authentication
CVE-2026-78135		 CWE-287 Medium
No
No
 - 22.09.2026 SB2026092230
SB2026092245
SB2026093059
#VU151582 - Use of Uninitialized Variable
CVE-2026-78123		 CWE-457 Medium
No
No
 - 22.09.2026 SB2026092230
SB2026092245
SB2026093056
and 3 more
#VU151581 - Missing release of memory after effective lifetime
CVE-2026-78124		 CWE-401 Medium
No
No
 - 22.09.2026 SB2026092230
SB2026092245
SB2026093056
and 3 more
#VU151580 - NULL Pointer Dereference
CVE-2026-78126		 CWE-476 Medium
No
No
 - 22.09.2026 SB2026092230
SB2026092245
SB2026093056
and 3 more
#VU146820 - Integer underflow
CVE-2026-54890		 CWE-191 Medium
No
No
 - 02.09.2026 SB20260902104
SB20260902108
SB2026092979
and 1 more
#VU146004 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-59944		 CWE-59 Medium
No
No
 - 27.08.2026 SB20260827147
SB20260827152
SB20260827153
and 7 more
#VU138584 - Off-by-one Error
CVE-2026-64047		 CWE-193 Low
No
No
 - 20.07.2026 SB20260720176
SB2026072357
SB2026072358
and 27 more
#VU138501 - Improper Access Control
CVE-2026-64137		 CWE-284 Low
No
No
 - 20.07.2026 SB2026072089
SB2026072366
SB2026072479
and 15 more
#VU138500 - Improper Access Control
CVE-2026-64137		 CWE-284 Low
No
No
 - 20.07.2026 SB2026072088
SB2026072366
SB2026072479
and 15 more
#VU120132 - Memory corruption
CVE-2025-68179		 CWE-119 Low
No
No
 - 16.12.2025 SB20251216176
SB2026021239
SB2026021240
and 15 more
#VU117659 - Improper input validation
CVE-2025-40022		 CWE-20 Low
No
No
 - 26.10.2025 SB2025102606
SB2025111213
SB20260921179
and 2 more
#VU113408 - Resource Management Errors
CVE-2025-38469		 CWE-399 Low
No
No
 - 29.07.2025 SB2025072951
SB2025081508
SB2025102407
and 24 more
#VU102892 - Missing release of memory after effective lifetime
CVE-2024-57841		 CWE-401 Low
No
No
 - 17.01.2025 SB2025011734
SB2025021461
SB2025021463
and 30 more
#VU96866 - Error Handling
CVE-2024-44981		 CWE-388 Low
No
No
 - 05.09.2024 SB2024090552
SB20260921179
SB2026093001


Showing elements 1 - 20 out of 12894