Lucene search
+L
SusecveMost viewed

62981 matches found

SUSE CVE
SUSE CVE
added 2026/06/07 4:43 a.m.16 views

SUSE CVE-2026-11175

Incorrect security UI in Messages in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS5.5AI score0.00234EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2026/06/07 4:42 a.m.16 views

SUSE CVE-2026-11184

Insufficient policy enforcement in Actor in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

6.3CVSS5.5AI score0.00158EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2026/06/07 4:39 a.m.16 views

SUSE CVE-2026-11274

Inappropriate implementation in DOM Distiller in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

4.3CVSS5.5AI score0.00175EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2026/06/07 4:39 a.m.16 views

SUSE CVE-2026-11277

Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: Low...

4.3CVSS5.5AI score0.00213EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2026/06/07 4:38 a.m.16 views

SUSE CVE-2026-22004

unknown...

4.9CVSS7.4AI score0.00323EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/06/06 5:17 a.m.16 views

SUSE CVE-2022-50077

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix reference count leak in aapivotroot The aapivotroot function has a reference counting bug in a specific path. When aareplacecurrentlabel returns on success, the function forgets to decrement the reference count of...

5.5CVSS6.2AI score0.00161EPSS
SaveExploits0References9
SUSE CVE
SUSE CVE
added 2026/06/06 2:54 a.m.16 views

SUSE CVE-2026-7774

tarfile.datafilter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. This allowed a malicious tar archive to cause tarfile.extractall to write files outside the...

7.5CVSS5.4AI score0.00598EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2026/06/05 3:12 a.m.16 views

SUSE CVE-2026-37462

An integer underflow in the BGPUpdate.DecodeFromBytes function /bgp/bgp.go of gobgp v4.3.0 allows attackers to cause a Denial of Service DoS via supplying a crafted BGP UPDATE message...

7.5CVSS5.8AI score0.00279EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/06/04 2:42 a.m.16 views

SUSE CVE-2022-43467

An out-of-bounds write vulnerability exists in the PQS format coordfile functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

9.8CVSS7.1AI score0.00828EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
added 2026/06/04 2:31 a.m.16 views

SUSE CVE-2026-3150

A security vulnerability has been detected in itsourcecode College Management System 1.0. This affects an unknown part of the file /admin/display-teacher.php. The manipulation of the argument teacherid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been...

8.8CVSS6.4AI score0.00265EPSS
SaveExploits1References16
SUSE CVE
SUSE CVE
added 2026/06/04 2:27 a.m.16 views

SUSE CVE-2026-28901

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash...

6.5CVSS5.8AI score0.00389EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
added 2026/06/04 2:27 a.m.16 views

SUSE CVE-2026-28947

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash...

7.5CVSS5.8AI score0.00378EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
added 2026/06/04 2:23 a.m.16 views

SUSE CVE-2026-43658

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash...

6.5CVSS5.8AI score0.00318EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
added 2026/06/04 2:23 a.m.16 views

SUSE CVE-2026-45678

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, the Postgres protocol parser assumes BIND message payloads contain a valid NUL-terminated portal name. A crafted empty or unterminated payload can make OBI slice beyond th...

7.5CVSS5.8AI score0.00342EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
added 2026/06/04 2:23 a.m.16 views

SUSE CVE-2026-45684

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From version 0.7.0 to before version 0.9.0, OBI's log enricher mishandles writev buffers by reading only the first iovec entry but using the total ioviter.count as the copy length. When log...

5.3CVSS5.7AI score0.00172EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
added 2026/06/04 2:22 a.m.16 views

SUSE CVE-2026-46244

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftinner: Fix IPv6 innerthoff desync In nftinnerparsel2l3, when processing inner IPv6 packets, ipv6findhdr correctly computes the transport header offset traversing all extension headers, but the result is immediately...

5.5CVSS5.8AI score0.00322EPSS
SaveExploits0References18
SUSE CVE
SUSE CVE
added 2026/06/04 2:21 a.m.16 views

SUSE CVE-2026-46252

In the Linux kernel, the following vulnerability has been resolved: regulator: core: fix locking in regulatorresolvesupply error path If late enabling of a supply regulator fails in regulatorresolvesupply, the code currently triggers a lockdep warning: WARNING: drivers/regulator/core.c:2649 at...

5.5CVSS5.8AI score0.00091EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2026/06/04 2:21 a.m.16 views

SUSE CVE-2026-46253

In the Linux kernel, the following vulnerability has been resolved: pstore/ram: fix buffer overflow in persistentramsaveold persistentramsaveold can be called multiple times for the same persistentramzone e.g., via ramoopspstoreread - ramoopsgetnextprz for PSTORETYPEDMESG records. Currently, the...

5.5CVSS5.9AI score0.00136EPSS
SaveExploits0References22
SUSE CVE
SUSE CVE
added 2026/06/02 1:44 a.m.16 views

SUSE CVE-2026-10194

A weakness has been identified in OFFIS DCMTK 3.7.0. This affects the function DcmQueryRetrieveIndexDatabaseHandle::deleteOldestImages of the file dcmqrdb/libsrc/dcmqrdbi.cc of the component dcmqrscp. Executing a manipulation can lead to heap-based buffer overflow. The attack may be launched...

6.5CVSS6.7AI score0.00247EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/06/02 1:44 a.m.16 views

SUSE CVE-2026-10230

A vulnerability was identified in Assimp up to 6.0.4. This impacts the function Assimp::MDL::HalfLife::HL1MDLLoader::readanimations of the file HL1MDLLoader.cpp of the component Half-Life 1 MDL Loader. Such manipulation leads to heap-based buffer overflow. The attack must be carried out locally...

5.3CVSS6.1AI score0.00127EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/06/02 1:44 a.m.16 views

SUSE CVE-2026-10267

A security flaw has been discovered in janet-lang janet up to 1.41.0. This affects the function doframe of the file src/core/debug.c. Performing a manipulation results in out-of-bounds read. Attacking locally is a requirement. The exploit has been released to the public and may be used for attack...

4.8CVSS5.4AI score0.00121EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/06/02 1:40 a.m.16 views

SUSE CVE-2026-42502

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

6.1CVSS6AI score0.00223EPSS
SaveExploits0References20
SUSE CVE
SUSE CVE
added 2026/06/02 1:37 a.m.16 views

SUSE CVE-2026-47187

unknown...

5.8AI score0.00031EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2026/06/02 1:37 a.m.16 views

SUSE CVE-2026-48827

Path traversal vulnerability in Apache MINA SSHD bundle sshd-git. Lack of path validation in git-upload-pack, git-receive-pack, and other git operations allows users authenticated over SSH access to git repositories outside the configured git server root directory. Applications are affected if th...

6.5CVSS5.8AI score0.00527EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2026/05/30 2:18 a.m.16 views

SUSE CVE-2026-9896

Out of bounds write in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS6.2AI score0.00291EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/30 2:18 a.m.16 views

SUSE CVE-2026-9921

Uninitialized Use in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin information via a crafted HTML page. Chromium security severity: High...

4.3CVSS5.8AI score0.00238EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/30 2:18 a.m.16 views

SUSE CVE-2026-9925

Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.3CVSS5.8AI score0.00222EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/30 2:17 a.m.16 views

SUSE CVE-2026-9929

Inappropriate implementation in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

4.3CVSS5.8AI score0.00209EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/30 2:17 a.m.16 views

SUSE CVE-2026-9936

Use after free in GFX in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.3CVSS5.8AI score0.00222EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/30 2:17 a.m.16 views

SUSE CVE-2026-9938

Inappropriate implementation in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS6.2AI score0.00319EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/30 2:17 a.m.16 views

SUSE CVE-2026-9940

Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS6AI score0.00259EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/30 2:17 a.m.16 views

SUSE CVE-2026-9941

Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS6.2AI score0.00303EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/30 2:17 a.m.16 views

SUSE CVE-2026-9942

Uninitialized Use in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

5CVSS5.7AI score0.00199EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/30 2:17 a.m.16 views

SUSE CVE-2026-9943

Out of bounds read in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

4.3CVSS5.8AI score0.00209EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/30 2:17 a.m.16 views

SUSE CVE-2026-9948

Use after free in Views in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.3CVSS5.8AI score0.00222EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/30 2:17 a.m.16 views

SUSE CVE-2026-9949

Use after free in Core in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.3CVSS5.8AI score0.00222EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/30 2:17 a.m.16 views

SUSE CVE-2026-9950

Insufficient validation of untrusted input in iOS in Google Chrome on iOS prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. Chromium security severity: High...

3.1CVSS5.8AI score0.00199EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/30 2:17 a.m.16 views

SUSE CVE-2026-9951

Use after free in UI in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.3CVSS5.8AI score0.00222EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/30 2:17 a.m.16 views

SUSE CVE-2026-9953

Out of bounds read in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

6.5CVSS5.8AI score0.00247EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/30 2:17 a.m.16 views

SUSE CVE-2026-9958

Use after free in PDFium in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: High...

8.8CVSS5.8AI score0.00224EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/30 2:16 a.m.16 views

SUSE CVE-2026-9966

Integer overflow in XML in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.3CVSS5.9AI score0.00214EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/30 2:16 a.m.16 views

SUSE CVE-2026-9969

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: High...

8.8CVSS6.2AI score0.00291EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/30 2:16 a.m.16 views

SUSE CVE-2026-9972

Uninitialized Use in Gamepad in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.3CVSS5.8AI score0.00226EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/30 2:16 a.m.16 views

SUSE CVE-2026-9975

Out of bounds read and write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.3CVSS5.8AI score0.00214EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/30 2:16 a.m.16 views

SUSE CVE-2026-9976

Inappropriate implementation in USB in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: High...

8.8CVSS6.2AI score0.00296EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/30 2:16 a.m.16 views

SUSE CVE-2026-9977

Insufficient validation of untrusted input in WebShare in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.3CVSS5.8AI score0.00184EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/30 2:16 a.m.16 views

SUSE CVE-2026-9979

Insufficient validation of untrusted input in Input in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

5CVSS5.7AI score0.00128EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/30 2:16 a.m.16 views

SUSE CVE-2026-9981

Inappropriate implementation in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

6.5CVSS5.8AI score0.00191EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/30 2:16 a.m.16 views

SUSE CVE-2026-9983

Type Confusion in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS6.2AI score0.00255EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/05/30 2:16 a.m.16 views

SUSE CVE-2026-9993

Use after free in Views in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted PDF file. Chromium security severity: High...

8.3CVSS5.8AI score0.00164EPSS
SaveExploits0References3
Total number of security vulnerabilities5000