openSUSE vulnerabilities

83 published CVEs name openSUSE among the affected products.

Newest CVEs

CVE-2026-104618
sdbootutil: world-readable debug log
SUSE · SUSE Linux Enterprise Server 16.1
Medium6.9
CVE-2026-104617
sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/<pid>/cmdline
SUSE · SUSE Linux Enterprise Server 16.1
Medium5.9
CVE-2026-48863
Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service
OpenSUSE · libsolv
High7.5
CVE-2026-56004
obs-service-tar_scm: command injection via mercurial handler
openSUSE · buildservice
Critical10.0
CVE-2026-25701
An Insecure Temporary File vulnerability in openSUSE sdbootutil allows local users to pre-create a directory to achieve various effects like: * gain access to…
openSUSE · sdbootutil
High7.0
CVE-2025-53881
SUSE-specific logrotate configuration allows escalation from mail user/group to root
openSUSE · Tumbleweed
Medium6.9
CVE-2025-46810
A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of openSUSE Tumbleweed traefik2 allows the traefik user to escalate to root. This issue…
openSUSE · Tumbleweed
High8.5
CVE-2024-49505
XSS vulnerability found in OpenSuse MirrorCache
openSUSE · Tumbleweed
Medium5.3
CVE-2024-49506
Fixed temporary file path in aeon-checks allows fixing of disk encryption key
openSUSE · Tumbleweed
High7.3
CVE-2023-32184
A Insecure Storage of Sensitive Information vulnerability in openSUSE opensuse-welcome allows local attackers to execute code as the user that runs…
openSUSE · opensuse-welcome
High7.8