Lucene search
+L
SusecveMost viewed

62981 matches found

SUSE CVE
SUSE CVE
•added 2026/06/07 4:47 a.m.•15 views

SUSE CVE-2026-11018

Insufficient policy enforcement in Actor in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.5AI score0.0028EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:47 a.m.•15 views

SUSE CVE-2026-11021

Insufficient validation of untrusted input in GPU in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS5.5AI score0.00325EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:47 a.m.•15 views

SUSE CVE-2026-11041

Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS5.5AI score0.00234EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:46 a.m.•15 views

SUSE CVE-2026-11067

Uninitialized Use in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.5AI score0.0025EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:45 a.m.•15 views

SUSE CVE-2026-11110

Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.5AI score0.0025EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:44 a.m.•15 views

SUSE CVE-2026-11125

Use after free in Compositing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS6AI score0.0028EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:43 a.m.•15 views

SUSE CVE-2026-11156

Inappropriate implementation in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.5AI score0.00152EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:42 a.m.•15 views

SUSE CVE-2026-11177

Use after free in Omnibox in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS5.5AI score0.00234EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:42 a.m.•15 views

SUSE CVE-2026-11181

Inappropriate implementation in Media Session in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

6.3CVSS5.5AI score0.00137EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:42 a.m.•15 views

SUSE CVE-2026-11196

Type Confusion in XML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted XML file. Chromium security severity: Medium...

6.5CVSS5.5AI score0.00228EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:41 a.m.•15 views

SUSE CVE-2026-11210

Inappropriate implementation in Safe Browsing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control via a crafted RAR file. Chromium security severity: Medium...

6.5CVSS5.5AI score0.00185EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:41 a.m.•15 views

SUSE CVE-2026-11213

Insufficient validation of untrusted input in Reading Mode in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS5.5AI score0.00195EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:41 a.m.•15 views

SUSE CVE-2026-11216

Incorrect security UI in File Input in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

4.3CVSS5.5AI score0.00163EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:41 a.m.•15 views

SUSE CVE-2026-11222

Incorrect security UI in Tab Strip in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Chromium security severity: Low...

6.5CVSS5.5AI score0.00171EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:41 a.m.•15 views

SUSE CVE-2026-11228

Inappropriate implementation in File Input in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

4.3CVSS5.5AI score0.00154EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:41 a.m.•15 views

SUSE CVE-2026-11234

Inappropriate implementation in FoldableAPIs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Low...

4.3CVSS5.4AI score0.00177EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:40 a.m.•15 views

SUSE CVE-2026-11249

Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

4.7CVSS5.5AI score0.00186EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:40 a.m.•15 views

SUSE CVE-2026-11259

Insufficient validation of untrusted input in Cast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...

4.3CVSS5.5AI score0.00182EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:39 a.m.•15 views

SUSE CVE-2026-11283

Insufficient validation of untrusted input in Shortcuts in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions via a malicious file. Chromium security severity: Low...

6.5CVSS5.5AI score0.002EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:39 a.m.•15 views

SUSE CVE-2026-11286

Insufficient validation of untrusted input in Wallet in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

4.3CVSS5.5AI score0.00154EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:39 a.m.•15 views

SUSE CVE-2026-11289

Side-channel information leakage in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

6.5CVSS5.5AI score0.00197EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:39 a.m.•15 views

SUSE CVE-2026-11295

Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Low...

8.8CVSS5.5AI score0.00206EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:39 a.m.•15 views

SUSE CVE-2026-11297

Insufficient validation of untrusted input in Reader Mode in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to bypass navigation restrictions via a malicious file. Chromium security severity: Low...

7.7CVSS5.4AI score0.00091EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:38 a.m.•15 views

SUSE CVE-2026-11306

Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. Chromium security severity: Low...

8.8CVSS6AI score0.00224EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/06/07 4:38 a.m.•15 views

SUSE CVE-2026-35240

unknown...

4.9CVSS7.4AI score0.00242EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/06 2:53 a.m.•15 views

SUSE CVE-2026-10722

A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such manipulation of the argument offset leads to integer overflow. The attack can only be performed from a...

7.5CVSS4.9AI score0.00179EPSS
SaveExploits1References6
SUSE CVE
SUSE CVE
•added 2026/06/06 2:46 a.m.•15 views

SUSE CVE-2026-44393

An issue was discovered in OpenStack oslo.messaging 1.0.0 through 17.3.0. The oslo.messaging RabbitMQ driver does not perform TLS hostname verification when connecting to the message broker. When sslcafile is configured, the driver enables certificate chain validation but does not pass the expect...

7.4CVSS5.4AI score0.0016EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/06 2:45 a.m.•15 views

SUSE CVE-2026-50258

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. The X server has multiple stack buffers sized XkbMaxShiftLevel XkbNumKbdGroups but CheckKeyTypes does not verify or clamp non-canonical key types to XkbMaxShiftLevel. A client can change key types to excessive shift...

7.8CVSS5.8AI score0.00161EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
•added 2026/06/06 2:45 a.m.•15 views

SUSE CVE-2026-50262

An out-of-bounds read flaw was found in the X.Org X server and Xwayland in glXDispChangeDrawableAttributes. A wrong size validation check can read a client-controlled number of bytes, exceeding the request buffer, leading to information disclosure. A write path also exists but requires byte-swapp...

5.5CVSS5.4AI score0.00132EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
•added 2026/06/06 2:45 a.m.•15 views

SUSE CVE-2026-50264

An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat. A client that requests multiple DRI2BufferBackLeft attachments and one DRI2BufferFrontLeft can trigger an out-of-bounds heap write. This may be used to crash the server, or for...

7.8CVSS5.4AI score0.00148EPSS
SaveExploits0References11
SUSE CVE
SUSE CVE
•added 2026/06/05 3:12 a.m.•15 views

SUSE CVE-2026-37462

An integer underflow in the BGPUpdate.DecodeFromBytes function /bgp/bgp.go of gobgp v4.3.0 allows attackers to cause a Denial of Service DoS via supplying a crafted BGP UPDATE message...

7.5CVSS5.8AI score0.00279EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/04 2:42 a.m.•15 views

SUSE CVE-2022-46291

Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to...

7.8CVSS7AI score0.00804EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
•added 2026/06/04 2:42 a.m.•15 views

SUSE CVE-2022-46295

Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to...

7.8CVSS7.1AI score0.0085EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
•added 2026/06/04 2:30 a.m.•15 views

SUSE CVE-2026-10650

A flaw has been found in warmcat libwebsockets up to 4.5.8. This issue affects the function lwssshparseplaintext of the file plugins/protocollwssshbase/sshd.c of the component SSH Protocol Handler. Executing a manipulation of the argument msglen can lead to resource consumption. The attack may be...

6.9CVSS5.7AI score0.00429EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/04 2:27 a.m.•15 views

SUSE CVE-2026-28905

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash...

6.5CVSS5.8AI score0.00411EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
•added 2026/06/04 2:27 a.m.•15 views

SUSE CVE-2026-28947

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash...

7.5CVSS5.8AI score0.00378EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
•added 2026/06/04 2:23 a.m.•15 views

SUSE CVE-2026-45680

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, OBI replays BPF probe hits into histogram observations by looping once per recorded run count. On busy systems, the run-count delta can become very large, causing the...

7.5CVSS5.7AI score0.00319EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2026/06/04 2:21 a.m.•15 views

SUSE CVE-2026-46255

In the Linux kernel, the following vulnerability has been resolved: dmaengine: fsl-edma: don't explicitly disable clocks in .remove The clocks in fsledmaengine::muxclk are allocated and enabled with devmclkgetenabled, which automatically cleans these resources up, but these clocks are also manual...

5.5CVSS5.8AI score0.00114EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/04 2:21 a.m.•15 views

SUSE CVE-2026-46259

In the Linux kernel, the following vulnerability has been resolved: procfs: fix missing RCU protection when reading realparent in dotaskstat When reading /proc/pid/stat, dotaskstat accesses task-realparent without proper RCU protection, which leads to: cpu 0 cpu 1 ----- ----- dotaskstat var =...

5.5CVSS5.8AI score0.0012EPSS
SaveExploits0References19
SUSE CVE
SUSE CVE
•added 2026/06/04 2:21 a.m.•15 views

SUSE CVE-2026-46264

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Fix sysfs initialization In case of devmaddactionorreset failure the provided cleanup action will be run immediately on the not yet initialized kobject. This may lead to errors like: kobject: 'null' ff110001393608e0: i...

8.8CVSS5.8AI score0.00112EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/04 2:21 a.m.•15 views

SUSE CVE-2026-46266

In the Linux kernel, the following vulnerability has been resolved: inet: RAW sockets using IPPROTORAW MUST drop incoming ICMP Yizhou Zhao reported that simply having one RAW socket on protocol IPPROTORAW 255 was dangerous. socketAFINET, SOCKRAW, 255; A malicious incoming ICMP packet can set the...

7CVSS5.8AI score0.00346EPSS
SaveExploits0References24
SUSE CVE
SUSE CVE
•added 2026/06/04 2:21 a.m.•15 views

SUSE CVE-2026-46273

In the Linux kernel, the following vulnerability has been resolved: ibmveth: Disable GSO for packets with small MSS Some physical adapters on Power systems do not support segmentation offload when the MSS is less than 224 bytes. Attempting to send such packets causes the adapter to freeze, stoppi...

5.5CVSS5.6AI score0.00389EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2026/06/04 2:21 a.m.•15 views

SUSE CVE-2026-49943

CZ.NIC BIRD Internet Routing Daemon through 2.19.0 contains a stack-based buffer overflow in the BGP ASPATH mask matching implementation in nest/a-path.c. The aspathmatch function uses a fixed-size stack array of 2048 + 1 pmpos entries, while parsepath expands ASPATH segments from a received BGP...

6.3CVSS6.1AI score0.003EPSS
SaveExploits2References3
SUSE CVE
SUSE CVE
•added 2026/06/02 1:44 a.m.•15 views

SUSE CVE-2026-10198

A flaw has been found in Assimp up to 6.0.4. Affected by this vulnerability is the function Assimp::glTFImporter::ImportMeshes of the file glTFImporter.cpp of the component glTFImporter. This manipulation causes null pointer dereference. The attack is restricted to local execution. The exploit ha...

4.8CVSS5.3AI score0.00113EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/02 1:44 a.m.•15 views

SUSE CVE-2026-10231

A security flaw has been discovered in Assimp up to 6.0.4. Affected is the function HL1MDLLoader::extractanimvalue of the file HL1MDLLoader.cpp of the component Half-Life 1 MDL Loader. Performing a manipulation of the argument num.total results in heap-based buffer overflow. The attack must be...

5.3CVSS6.2AI score0.00124EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/02 1:44 a.m.•15 views

SUSE CVE-2026-10232

A weakness has been identified in Assimp up to 6.0.4. Affected by this vulnerability is the function aiNode::aiNode of the file scene.cpp of the component ASE File Parser. Executing a manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been made...

7CVSS5.6AI score0.00115EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/06/02 1:38 a.m.•15 views

SUSE CVE-2026-44422

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's RDPEAR NDR parser accepts one non-null NDR pointer ref-id for multiple logical pointer fields without tracking the pointed object's expected NDR type or ownership. When the same ref-id is reused across two...

7.5CVSS5.8AI score0.00431EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
•added 2026/06/02 1:38 a.m.•15 views

SUSE CVE-2026-45324

Rizin is a UNIX-like reverse engineering framework and command-line toolset. There is a double free in librz/core/cmd/cmdsearch.c:bytepatternsearch due wrong pointer ownership declared. This vulnerability is fixed by commit 045fff363b42b8a6dda8ad5229c29ec3267e7dbe...

3.3CVSS5.8AI score0.00101EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/05/30 2:18 a.m.•15 views

SUSE CVE-2026-9916

Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.3CVSS5.8AI score0.00222EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/05/30 2:18 a.m.•15 views

SUSE CVE-2026-9917

Uninitialized Use in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

6.5CVSS5.8AI score0.0027EPSS
SaveExploits0References3
Total number of security vulnerabilities5000