openSUSE vulnerabilities

CVEs per yearBy the year they were published

1. 20182
2. 20181
3. 20181
4. 202017
5. 202012
6. 202114
7. 202210
8. 20235
9. 202311
10. 20242
11. 20252
12. 20265

Newest CVEs

• CVE-2026-104618

  sdbootutil: world-readable debug log

  SUSE · SUSE Linux Enterprise Server 16.1

  Medium6.9
• CVE-2026-104617

  sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/<pid>/cmdline

  SUSE · SUSE Linux Enterprise Server 16.1

  Medium5.9
• CVE-2026-48863

  Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service

  OpenSUSE · libsolv

  High7.5
• CVE-2026-56004

  obs-service-tar_scm: command injection via mercurial handler

  openSUSE · buildservice

  Critical10.0
• CVE-2026-25701

  An Insecure Temporary File vulnerability in openSUSE sdbootutil allows local users to pre-create a directory to achieve various effects like: * gain access to…

  openSUSE · sdbootutil

  High7.0
• CVE-2025-53881

  SUSE-specific logrotate configuration allows escalation from mail user/group to root

  openSUSE · Tumbleweed

  Medium6.9
• CVE-2025-46810

  A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of openSUSE Tumbleweed traefik2 allows the traefik user to escalate to root. This issue…

  openSUSE · Tumbleweed

  High8.5
• CVE-2024-49505

  XSS vulnerability found in OpenSuse MirrorCache

  openSUSE · Tumbleweed

  Medium5.3
• CVE-2024-49506

  Fixed temporary file path in aeon-checks allows fixing of disk encryption key

  openSUSE · Tumbleweed

  High7.3
• CVE-2023-32184

  A Insecure Storage of Sensitive Information vulnerability in openSUSE opensuse-welcome allows local attackers to execute code as the user that runs…

  openSUSE · opensuse-welcome

  High7.8