Lucene search
+L
SusecveMost viewed

62981 matches found

SUSE CVE
SUSE CVE
•added 2026/06/13 2:28 a.m.•16 views

SUSE CVE-2026-12027

Inappropriate implementation in Headless in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

9.6CVSS5.3AI score0.00224EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/12 2:33 a.m.•16 views

SUSE CVE-2026-3886

unknown...

8.8CVSS7.2AI score
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2026/06/12 2:32 a.m.•16 views

SUSE CVE-2026-11791

A flaw was found in 389 Directory Server. During schema reload, the attrsyntaxswapht function unconditionally frees attribute syntax information nodes, bypassing the refcount-based deferred deletion used elsewhere in the attribute syntax subsystem. If an administrator triggers schema reload while...

5CVSS5.8AI score0.00212EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/06/12 2:32 a.m.•16 views

SUSE CVE-2026-11824

SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malicious continuation page metadata specifying a szLeaf value smaller than 4...

7.8CVSS6.2AI score0.00175EPSS
SaveExploits0References9
SUSE CVE
SUSE CVE
•added 2026/06/12 2:27 a.m.•16 views

SUSE CVE-2026-42258

Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, symbol arguments to commands are vulnerable to a CRLF Injection / IMAP Command injection via Symbol arguments passed to IMAP commands. This issue has been patched ...

5.3CVSS5.3AI score0.00783EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
•added 2026/06/12 2:27 a.m.•16 views

SUSE CVE-2026-42487

HVM guest I/O port accesses are subject to either emulation or at least translation. Translations are managed by the device model via XENDOMCTLioportmapping, and hence the linked list used may changed at any time. Traversal of those lists while handling guest I/O port accesses therefore needs...

7.8CVSS5.8AI score0.00095EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
•added 2026/06/12 2:27 a.m.•16 views

SUSE CVE-2026-42488

Some shadow paging errors paths will switch the page-tables without updating the currently running vCPU reference. This causes a mismatch between the loaded page-tables and the mapcache metadata which can lead to corruption of the mapcache...

7.5CVSS5.8AI score0.00353EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
•added 2026/06/12 2:25 a.m.•16 views

SUSE CVE-2026-47734

Dulwich is a pure-Python implementation of the Git file formats and protocols. Starting in version 0.1.0 and prior to version 1.2.5, a client with push access could push a tiny crafted thin pack 174 bytes whose delta header declares a huge destsize. When dulwich ingested it via addthinpack /...

6.5CVSS5.3AI score0.00188EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/06/10 2:33 a.m.•16 views

SUSE CVE-2026-9698

DBI versions before 1.648 for Perl saved errors in a limited-sized buffer. Error messages that were returned when RaiseError, PrintError or HandleError were set were written to a 200-byte buffer without a length limit. Attackers that can influence the error text in an application can trigger a...

7.8CVSS5.9AI score0.00464EPSS
SaveExploits0References11
SUSE CVE
SUSE CVE
•added 2026/06/10 2:32 a.m.•16 views

SUSE CVE-2026-11623

A security vulnerability has been detected in tmux up to 3.6a. Affected is the function imagefree of the file image.c. Such manipulation leads to use after free. Local access is required to approach this attack. This attack is characterized by high complexity. The exploitability is told to be...

5.8CVSS4.6AI score0.00124EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/10 2:32 a.m.•16 views

SUSE CVE-2026-11631

Use after free in Aura in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

8.3CVSS5.5AI score0.00222EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/10 2:32 a.m.•16 views

SUSE CVE-2026-11632

Use after free in TabStrip in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. Chromium security severity: Critical...

7.5CVSS6AI score0.00264EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/10 2:32 a.m.•16 views

SUSE CVE-2026-11635

Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

8.3CVSS5.5AI score0.00222EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/10 2:31 a.m.•16 views

SUSE CVE-2026-11663

Use after free in Skia in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.3CVSS5.5AI score0.00222EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/10 2:25 a.m.•16 views

SUSE CVE-2026-46317

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Reassign nestedmmus array behind mmulock kvm-arch.nestedmmus is walked under kvm-mmulock, including from the MMU notifier path kvmunmapgfnrange - kvmnesteds2unmap, which can run at any time. kvmvcpuinitnested...

7.8CVSS5.6AI score0.0013EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
•added 2026/06/10 2:25 a.m.•16 views

SUSE CVE-2026-46320

In the Linux kernel, the following vulnerability has been resolved: tap: free page on error paths in tapgetuserxdp tapgetuserxdp rejects a frame shorter than ETHHLEN with -EINVAL, and returns -ENOMEM when buildskb fails. Both paths jump to the err label without freeing the page that...

3.3CVSS5.4AI score0.00235EPSS
SaveExploits0References22
SUSE CVE
SUSE CVE
•added 2026/06/10 2:25 a.m.•16 views

SUSE CVE-2026-48913

Use After Free vulnerability in Apache HTTP Server module modhttp2 when file handles are already exhausted. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.67...

5.9CVSS5.4AI score0.00479EPSS
SaveExploits0References9
SUSE CVE
SUSE CVE
•added 2026/06/10 2:25 a.m.•16 views

SUSE CVE-2026-49762

Uncontrolled Resource Consumption vulnerability in the Elixir standard library's Version module allows an attacker who controls a version string to cause a denial of service through CPU and memory exhaustion. The version parser converts numeric version components major, minor, patch and numeric...

5.1CVSS5.5AI score0.00152EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/09 2:28 a.m.•16 views

SUSE CVE-2025-71315

In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Convert to DRM's vblank timer Replace vkms' vblank timer with the DRM implementation. The DRM code is identical in concept, but differs in implementation. Vblank timers are covered in vblank helpers and initializer...

5.5CVSS5.5AI score0.00112EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/09 2:21 a.m.•16 views

SUSE CVE-2026-46277

In the Linux kernel, the following vulnerability has been resolved: mm/zonedevice: do not touch device folio after calling -foliofree The contents of a device folio can immediately change after calling -foliofree, as the folio may be reallocated by a driver with a different order. Instead of...

5.5CVSS5.3AI score0.0012EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/09 2:21 a.m.•16 views

SUSE CVE-2026-46281

In the Linux kernel, the following vulnerability has been resolved: vmalloc: fix buffer overflow in vreallocnodealign Commit 4c5d3365882d "mm/vmalloc: allow to set node and align in vrealloc" added the ability to force a new allocation if the current pointer is on the wrong NUMA node, or if an...

5.5CVSS5.8AI score0.0014EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/09 2:20 a.m.•16 views

SUSE CVE-2026-46290

In the Linux kernel, the following vulnerability has been resolved: x86/efi: Fix graceful fault handling after FPU softirq changes Since commit d02198550423 "x86/fpu: Improve crypto performance by making kernel-mode FPU reliably usable in softirqs", kernelfpubegin calls fpregslock which uses...

5.5CVSS5.4AI score0.00121EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/09 2:20 a.m.•16 views

SUSE CVE-2026-46291

In the Linux kernel, the following vulnerability has been resolved: crypto: caam - guard HMAC key hex dumps in hashdigestkey Use printhexdumpdevel for dumping sensitive HMAC key bytes in hashdigestkey to avoid leaking secrets at runtime when CONFIGDYNAMICDEBUG is enabled...

5.5CVSS5.4AI score0.00123EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2026/06/09 2:20 a.m.•16 views

SUSE CVE-2026-46298

In the Linux kernel, the following vulnerability has been resolved: pseries/papr-hvpipe: Fix race with interrupt handler While executing -ioctl handler or -release handler, if an interrupt fires on the same cpu, then we can enter into a deadlock. This patch fixes both these handlers to take...

5.5CVSS5.5AI score0.00074EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/09 2:20 a.m.•16 views

SUSE CVE-2026-46299

In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix held lock freed on hfsplusfillsuper hfsplusfillsuper calls hfsfindinit to initialize a search structure, which acquires tree-treelock. If the subsequent call to hfspluscatbuildkey fails, the function jumps to the...

5.5CVSS5.5AI score0.00091EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/06/09 2:20 a.m.•16 views

SUSE CVE-2026-46307

In the Linux kernel, the following vulnerability has been resolved: wifi: ath5k: do not access array OOB Vincent reports: The ath5k driver seems to do an array-index-out-of-bounds access as shown by the UBSAN kernel message: UBSAN: array-index-out-of-bounds in...

4.3CVSS5.4AI score0.0022EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2026/06/09 2:20 a.m.•16 views

SUSE CVE-2026-46308

In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: fix use-after-free in scpsysgetbusprotectionlegacy In scpsysgetbusprotectionlegacy, offindnodewithproperty returns a device node with its reference count incremented. The function then calls ofnodeputnode befo...

7CVSS5.4AI score0.00115EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/09 2:20 a.m.•16 views

SUSE CVE-2026-48103

7-Zip is a file archiver with a high compression ratio. Versions 9.34 through 26.00 contain an off-by-one heap out-of-bounds read in the WIM Windows Imaging archive handler's security descriptor lookup. In CHandler::GetSecurity CPP/7zip/Archive/Wim/WimHandler.cpp, the per-image SecurOffsets table...

3.3CVSS5.4AI score0.00225EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
•added 2026/06/09 2:20 a.m.•16 views

SUSE CVE-2026-48111

7-Zip is a file archiver with a high compression ratio. Versions 9.21 through 26.00 contain an off-by-one out-of-bounds read vulnerability in the ParseDepedencyExpression function of the UEFI firmware image parserCPP/7zip/Archive/UefiHandler.cpp. The function validates an attacker-controlled opco...

3.3CVSS5.4AI score0.00225EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
•added 2026/06/07 4:51 a.m.•16 views

SUSE CVE-2026-10888

Use after free in Cast Streaming in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to execute arbitrary code via malicious network traffic. Chromium security severity: Critical...

8.8CVSS6AI score0.00187EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:51 a.m.•16 views

SUSE CVE-2026-10900

Use after free in Passwords in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...

7.5CVSS5.6AI score0.00286EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:50 a.m.•16 views

SUSE CVE-2026-10921

Integer overflow in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.3CVSS5.5AI score0.00286EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:50 a.m.•16 views

SUSE CVE-2026-10931

Use after free in FileSystem in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

9.6CVSS5.5AI score0.00325EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:50 a.m.•16 views

SUSE CVE-2026-10938

Inappropriate implementation in Input in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

6.5CVSS5.4AI score0.0035EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:50 a.m.•16 views

SUSE CVE-2026-10948

Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS6AI score0.00493EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:49 a.m.•16 views

SUSE CVE-2026-10963

Integer overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS6.1AI score0.00361EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:49 a.m.•16 views

SUSE CVE-2026-10976

Uninitialized Use in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

7.4CVSS5.5AI score0.00336EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:49 a.m.•16 views

SUSE CVE-2026-10977

Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

6.5CVSS5.5AI score0.00336EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:49 a.m.•16 views

SUSE CVE-2026-10981

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted video file. Chromium security severity: High...

6.5CVSS5.5AI score0.00284EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:48 a.m.•16 views

SUSE CVE-2026-10995

Heap buffer overflow in TabStrip in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS5.9AI score0.00352EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:48 a.m.•16 views

SUSE CVE-2026-10996

Inappropriate implementation in Workers in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.5AI score0.00262EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:48 a.m.•16 views

SUSE CVE-2026-10998

Out of bounds read in Media in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to perform an out of bounds memory read via malicious network traffic. Chromium security severity: Medium...

4CVSS5.4AI score0.00106EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:48 a.m.•16 views

SUSE CVE-2026-11016

Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.5AI score0.0028EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:47 a.m.•16 views

SUSE CVE-2026-11046

Insufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS6AI score0.00361EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:46 a.m.•16 views

SUSE CVE-2026-11047

Inappropriate implementation in Base in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS5.5AI score0.00301EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:46 a.m.•16 views

SUSE CVE-2026-11060

Use after free in Media in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS6AI score0.0028EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:45 a.m.•16 views

SUSE CVE-2026-11100

Use after free in File Input in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS5.5AI score0.00255EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:45 a.m.•16 views

SUSE CVE-2026-11110

Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.5AI score0.0025EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:44 a.m.•16 views

SUSE CVE-2026-11118

Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS6AI score0.00387EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:44 a.m.•16 views

SUSE CVE-2026-11133

Insufficient policy enforcement in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.5AI score0.00202EPSS
SaveExploits0References2
Total number of security vulnerabilities5000