SLES 15

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2021:1646-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-18032 CVE-2023-46045 CVE-2018-10196 CVE-2019-11023 Upstream summary: Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2022-2274 CVE-2016-0777 CVE-2026-35385 CVE-2024-6387 CVE-2023-38408 CVE-2021-41617 CVE-2016-10010 CVE-2021-28041  +12 more Upstream summary: The OpenSSL 3.0.4 release introduced a serious bug in the RSA implementation for […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:1963-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-29402 CVE-2023-29404 CVE-2023-29405 CVE-2023-29409 CVE-2023-29403 CVE-2023-24539 CVE-2023-29400 CVE-2023-24534  +8 more Upstream summary: The go command may generate unexpected code at build time when using cgo. […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:0769-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-1597 CVE-2026-42198 CVE-2022-31197 CVE-2022-41946 Upstream summary: pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE. Note this is not the default. […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2023:0260-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-27586 CVE-2026-31899 CVE-2021-21236 Upstream summary: CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to version 2.7.0, Cairo can send requests […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-202507:15303-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-38824 CVE-2020-11651 CVE-2020-11652 CVE-2020-16846 CVE-2020-25592 CVE-2020-28972 CVE-2020-35662 CVE-2021-25281  +12 more Upstream summary: Directory traversal vulnerability in recv_file method allows arbitrary files to be written to […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1008-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-1615 CVE-2026-25547 CVE-2026-27606 CVE-2025-61140 CVE-2025-13465 CVE-2025-12816 CVE-2016-8614 CVE-2016-8628  +5 more Upstream summary: Versions of the package jsonpath before 1.3.0 are vulnerable to Arbitrary Code Injection […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:0210 (see also SUSE bugzilla) Related CVEs: CVE-2024-11614 CVE-2022-2132 CVE-2022-28199 CVE-2020-14374 CVE-2020-14375 CVE-2020-14376 CVE-2020-14377 CVE-2020-14378  +10 more Upstream summary: An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature. […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:0979-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-2176 CVE-2025-2177 CVE-2025-2173 CVE-2025-2174 CVE-2025-2175 Upstream summary: A vulnerability classified as critical has been found in libzvbi up to 0.2.43. This affects the function vbi_capture_sim_load_caption […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2024:11122 (see also SUSE bugzilla) Related CVEs: CVE-2024-47540 CVE-2024-47537 CVE-2024-47539 CVE-2025-47183 CVE-2025-47219 CVE-2024-47530 CVE-2024-47543 CVE-2024-47545  +12 more Upstream summary: GStreamer is a library for constructing graphs of media-handling components. An uninitialized stack […]