Lucene search
+L
SusecveMost viewed

66350 matches found

SUSE CVE
SUSE CVE
added 2026/07/26 11:32 p.m.20 views

SUSE CVE-2026-11622

A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the...

7.5CVSS5.8AI score0.00523EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
added 2026/07/26 11:32 p.m.20 views

SUSE CVE-2026-12617

The issue is unexpected program termination based on ordering and/or specific content in responses to queries for CNAME or DNAME, and A records. Specifically, if a client queries for a DNAME and A record below the DNAME to the resolver, and the authoritative server responds positively to the A...

7.5CVSS5.8AI score0.00501EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2026/07/26 11:32 p.m.20 views

SUSE CVE-2026-13321

The BIND resolver accepts validly-signed NSEC records where the "Next Domain Name" field points outside the signer's zone. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1...

8.6CVSS5.8AI score0.00223EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
added 2026/07/26 11:32 p.m.20 views

SUSE CVE-2026-14586

In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, in DNS-over-QUIC environments, with high concurrency and under pressure, an assertion in libngtcp2 about monotonic timestamps could trigger and result in server termination and thus denial of service. When interfacing with libngtcp2, for...

5.9CVSS5.7AI score0.00268EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2026/07/26 11:32 p.m.20 views

SUSE CVE-2026-44687

In NLnet Labs Unbound 1.13.2 up to and including 1.25.1, stub or forward zones where the name is below an intermediate labed below a DNSSEC signed zone could be shadowed by the intermediate label's secure NXDOMAIN answer from the parent. This is caused by an off-by-one error in...

3.7CVSS5.8AI score0.00218EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
added 2026/07/26 11:31 p.m.20 views

SUSE CVE-2026-50248

In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when an auth/rpz zone has a configured primary hostname that resolves to BOGUS A/AAAA, it is still considered as a possible XFR endpoint. A malicious actor that can spoof the hostname's A/AAAA record no valid RRSIG required becomes the zone'...

5.9CVSS5.8AI score0.00128EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
added 2026/07/25 4:45 p.m.20 views

SUSE CVE-2026-64319

In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: validate reply message payload bounds against transfer length nvmetauthreply accesses the variable-length rval array using attacker-controlled hl hash length and dhvlen DH value length fields without verifying they fi...

8.2CVSS6AI score0.00524EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/25 4:00 p.m.20 views

SUSE CVE-2026-64384

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix change notify replay double-free A response-bearing attempt can return a replayable error and free its response buffer. If SMB2notifyinit fails before the next send, cleanup retains the previous buffer type and...

8.1CVSS5.9AI score0.00457EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2026/07/24 2:21 a.m.20 views

SUSE CVE-2026-46600

Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...

6.5CVSS5.8AI score0.00549EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2026/07/22 12:19 a.m.20 views

SUSE CVE-2017-1000377

An issue was discovered in the size of the default stack guard page on PAX Linux originally from GRSecurity but shipped by other Linux vendors, specifically the default stack guard page is not sufficiently large and can be "jumped" over the stack guard page is bypassed, this affects PAX Linux...

5.9CVSS5.9AI score0.00383EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/22 12:10 a.m.20 views

SUSE CVE-2026-16363

JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

9.8CVSS5.8AI score0.00436EPSS
SaveExploits0References15
SUSE CVE
SUSE CVE
added 2026/07/22 12:10 a.m.20 views

SUSE CVE-2026-16371

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, Thunderbird 140.13, Firefox ESR 140.15, and Thunderbird 140.15...

8.8CVSS6AI score0.00297EPSS
SaveExploits0References15
SUSE CVE
SUSE CVE
added 2026/07/22 12:10 a.m.20 views

SUSE CVE-2026-16375

Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

9.8CVSS5.8AI score0.00209EPSS
SaveExploits0References15
SUSE CVE
SUSE CVE
added 2026/07/22 12:09 a.m.20 views

SUSE CVE-2026-16391

Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

7.5CVSS5.8AI score0.00322EPSS
SaveExploits0References15
SUSE CVE
SUSE CVE
added 2026/07/22 12:09 a.m.20 views

SUSE CVE-2026-16396

Privilege escalation in WebExtensions. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

8.8CVSS5.8AI score0.00241EPSS
SaveExploits0References15
SUSE CVE
SUSE CVE
added 2026/07/21 1:03 p.m.20 views

SUSE CVE-2026-63904

In the Linux kernel, the following vulnerability has been resolved: usb: usbtmc: check URB actuallength for interrupt-IN notifications USBTMC devices can use an optional interrupt endpoint for notification messages. These typically contain two-byte headers indicating the payload format, but the...

5.2CVSS5.3AI score0.00226EPSS
SaveExploits0References17
SUSE CVE
SUSE CVE
added 2026/07/21 1:02 p.m.20 views

SUSE CVE-2026-63961

In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: validate count before reading Status Update VDO A broken/malicious device can send the incorrect count for a status update VDO, which will cause the kernel to read uninitialized stack data and se...

6.8CVSS5.2AI score0.00211EPSS
SaveExploits0References17
SUSE CVE
SUSE CVE
added 2026/07/21 1:02 p.m.20 views

SUSE CVE-2026-63972

In the Linux kernel, the following vulnerability has been resolved: net: mana: Skip redundant detach on already-detached port When manaperportqueueresetworkhandler runs after a previous detach succeeded but attach failed, the port is left in a detached state with apc-txqp and apc-rxqs already...

4.1CVSS5.3AI score0.00592EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
added 2026/07/21 1:01 p.m.20 views

SUSE CVE-2026-64017

In the Linux kernel, the following vulnerability has been resolved: blk-mq: pop cached request if it is usable When submitting a bio to blk-mq, if the task should sleep after peeking a cached request, but before it pops it, the plug flushes and calls blkmqfreeplugrqs, freeing the cachedrqs. This...

7CVSS5.3AI score0.00125EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2026/07/19 5:43 p.m.20 views

SUSE CVE-2026-15902

Use after free in Cast in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS6.1AI score0.00349EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/19 5:35 p.m.20 views

SUSE CVE-2026-53401

In the Linux kernel, the following vulnerability has been resolved: fbdev: omap2: fix use-after-free in omapfbmmap omapfbmmap has a race condition with OMAPFBSETUPPLANE ioctl that can lead to use-after-free: The fbmmap entry point holds mmlock but not lock fbinfo-lock, while ioctl handlers like...

7CVSS5.3AI score0.00177EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2026/07/17 12:57 p.m.20 views

SUSE CVE-2026-43715

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to memory corruption...

8.8CVSS7.2AI score0.00912EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
added 2026/07/15 6:48 p.m.20 views

SUSE CVE-2026-54433

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, there is Stored Cross-Site Scripting XSS via a crafted plain-text email message. The attacker-controlled JavaScript executes within the victim's authenticated session simply by opening or previewing the message zero-click...

10CVSS5.2AI score0.00311EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
added 2026/07/15 5:01 a.m.20 views

SUSE CVE-2026-59161

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Prior to 2.11.0, the streaming worksheet reader used by Rows and GetRows does not enforce the TotalRows limit on the row r attribute, allowing a small XLSX file with a row number above 1048576 and no cell...

8.7CVSS5.3AI score0.00393EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
added 2026/07/11 3:26 a.m.20 views

SUSE CVE-2026-39243

decompress before 4.2.2 allows arbitrary hardlink creation during archive extraction, enabling file read disclosure and file corruption. When processing hardlink entries type === 'link', the x.linkname field from the archive is passed directly to fs.link without validation index.js line 113. An...

5.5CVSS6.2AI score0.00301EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
added 2026/07/11 3:22 a.m.20 views

SUSE CVE-2026-53363

In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: preserve shared-frag marker in iptfsconsumefrags iptfsconsumefrags transfers paged fragments from one socket buffer to another but fails to propagate the SKBFLSHAREDFRAG flag. This is the same class of bug that was...

9.8CVSS6AI score0.00411EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/07 3:21 p.m.20 views

SUSE CVE-2026-9697

Impact: undici's ProxyAgent silently drops the requestTls option when configured with a SOCKS5 proxy URI socks5:// or socks://. The target HTTPS connection through the SOCKS5 tunnel falls back to Node's default trust store, ignoring user-configured ca, cert, key, rejectUnauthorized, and servernam...

7.4CVSS6AI score0.00459EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2026/07/07 3:13 p.m.20 views

SUSE CVE-2026-54060

Pillow is a Python imaging library. Prior to 12.3.0, PIL/FontFile.py FontFile.compile assembled per-glyph images into a combined bitmap with Image.new"1", xsize, ysize without calling Image.decompressionbombcheck, allowing a font to trigger excessive allocation during conversion or saving. This...

7.5CVSS6AI score0.00418EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
added 2026/07/07 3:13 p.m.20 views

SUSE CVE-2026-54763

Traefik is an HTTP reverse proxy and load balancer. Prior to v2.11.51, v3.6.22, and v3.7.6, Traefik's BasicAuth, DigestAuth, and ForwardAuth middlewares strip canonical-cased spoofed identity headers before writing Traefik's own value, but do not account for underscore-variant header names, which...

7.5CVSS6AI score0.00208EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/07 3:13 p.m.20 views

SUSE CVE-2026-54764

Traefik is an HTTP reverse proxy and load balancer. Prior to v2.11.51, v3.6.22, and v3.7.6, Traefik's ForwardAuth middleware, even when configured with trustForwardHeader: false, derives the X-Forwarded-Port header sent to the authentication service from the original incoming request instead of t...

5.3CVSS6AI score0.00281EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/07 3:13 p.m.20 views

SUSE CVE-2026-55380

Pillow is a Python imaging library. Prior to 12.3.0, PIL/GdImageFile.py GdImageFile.open read image dimensions from the GD 2.x header and stored them in self.size without calling Image.decompressionbombcheck, allowing a crafted .gd file to trigger excessive C-heap allocation when loaded. This iss...

7.5CVSS6AI score0.00418EPSS
SaveExploits1References7
SUSE CVE
SUSE CVE
added 2026/07/07 2:38 a.m.20 views

SUSE CVE-2026-13777

Insufficient validation of untrusted input in iOSWeb in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...

8.8CVSS6AI score0.00319EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/07 2:38 a.m.20 views

SUSE CVE-2026-13784

Use after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...

8.8CVSS6AI score0.00319EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/07 2:38 a.m.20 views

SUSE CVE-2026-13801

Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.3CVSS6AI score0.00304EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/07 2:37 a.m.20 views

SUSE CVE-2026-13812

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: High...

4.7CVSS6.1AI score0.00195EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/07 2:37 a.m.20 views

SUSE CVE-2026-13816

Insufficient validation of untrusted input in File Input in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

6.5CVSS6AI score0.00318EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/07 2:37 a.m.20 views

SUSE CVE-2026-13820

Out of bounds read in Skia in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

6.5CVSS6AI score0.00282EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/07 2:37 a.m.20 views

SUSE CVE-2026-13844

Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: High...

7.8CVSS6AI score0.00109EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/07 2:36 a.m.20 views

SUSE CVE-2026-13881

Inappropriate implementation in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6AI score0.00211EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/07 2:36 a.m.20 views

SUSE CVE-2026-13903

Insufficient policy enforcement in Bluetooth in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS6AI score0.00345EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/07 2:36 a.m.20 views

SUSE CVE-2026-13907

Inappropriate implementation in iOSWeb in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

4.2CVSS6AI score0.00212EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/07 2:35 a.m.20 views

SUSE CVE-2026-13912

Inappropriate implementation in Safe Browsing in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS6AI score0.00245EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/07 2:35 a.m.20 views

SUSE CVE-2026-13914

Inappropriate implementation in Passwords in Google Chrome on Mac prior to 150.0.7871.47 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. Chromium security severity: Medium...

5.5CVSS5.9AI score0.00118EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/07 2:35 a.m.20 views

SUSE CVE-2026-13918

Use after free in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS6AI score0.00345EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/07 2:35 a.m.20 views

SUSE CVE-2026-13921

Insufficient validation of untrusted input in DeviceBoundSessionCredentials in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6AI score0.00348EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/07 2:35 a.m.20 views

SUSE CVE-2026-13934

Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS6AI score0.00345EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/07 2:35 a.m.20 views

SUSE CVE-2026-13935

Side-channel information leakage in ComputePressure in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6AI score0.00318EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/07 2:35 a.m.20 views

SUSE CVE-2026-13939

Insufficient validation of untrusted input in WebShare in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

3.1CVSS6AI score0.00232EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/07 2:35 a.m.20 views

SUSE CVE-2026-13946

Inappropriate implementation in ScriptInjections in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS6AI score0.00213EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/07 2:35 a.m.20 views

SUSE CVE-2026-13952

Inappropriate implementation in PerformanceAPIs in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS6AI score0.00213EPSS
SaveExploits0References3
Total number of security vulnerabilities5000