SLES 15

🟠 High   ⏱ 15–60 min  Last verified: 29 April 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:7080 (see also SUSE bugzilla) Related CVEs: CVE-2026-21710 CVE-2025-55130 CVE-2025-55131 CVE-2025-59465 CVE-2025-23166 CVE-2025-23083 CVE-2024-21890 CVE-2024-21891  +12 more Upstream summary: A flaw in Node.js HTTP request handling causes an uncaught `TypeError` when a […]

🟠 High   ⏱ 15–60 min  Last verified: 29 April 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:10950 (see also SUSE bugzilla) Related CVEs: CVE-2026-4224 CVE-2026-1299 CVE-2026-0672 CVE-2023-40217 CVE-2023-24329 CVE-2021-28861 CVE-2015-20107 CVE-2008-2315  +12 more Upstream summary: When an Expat parser with a registered ElementDeclHandler parses an inline document type […]

🟡 Medium   ⏱ 10–30 min  Last verified: 28 April 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:0233-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-22702 Upstream summary: virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU (Time-of-Check-Time-of-Use) vulnerabilities in virtualenv allow local attackers […]

🟠 High   ⏱ 15–60 min  Last verified: 28 April 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:2719 (see also SUSE bugzilla) Related CVEs: CVE-2026-24882 CVE-2025-68973 CVE-2010-2547 CVE-2013-4402 CVE-2018-12020 CVE-2020-25125 CVE-2022-34903 CVE-2019-14855  +6 more Upstream summary: In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling […]

🟠 High   ⏱ 15–60 min  Last verified: 27 April 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:7342 (see also SUSE bugzilla) Related CVEs: CVE-2026-3608 CVE-2025-32801 CVE-2025-32802 CVE-2025-32803 Upstream summary: Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any configured API socket or […]

🟡 Medium   ⏱ 10–30 min  Last verified: 26 April 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:0849-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-27205 Upstream summary: Flask is a web server gateway interface (WSGI) web application framework. In versions 3.1.2 and below, when the session object is accessed, […]

🟠 High   ⏱ 15–60 min  Last verified: 26 April 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:10758 (see also SUSE bugzilla) Related CVEs: CVE-2026-35535 CVE-2025-32462 CVE-2025-32463 CVE-2023-42465 CVE-2023-22809 CVE-2022-43995 CVE-2012-2337 CVE-2017-1000367  +12 more Upstream summary: In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 April 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2017:2300-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-8367 CVE-2026-21413 CVE-2026-20911 CVE-2026-24660 CVE-2018-10528 CVE-2018-10529 CVE-2025-43962 CVE-2025-43964  +12 more Upstream summary: The phase_one_correct function in Libraw before 0.17.1 allows attackers to cause memory errors […]

🟠 High   ⏱ 15–60 min  Last verified: 24 April 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1819-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-41205 Upstream summary: Mako is a template library written in Python. Prior to 1.3.11, TemplateLookup.get_template() is vulnerable to path traversal when a URI starts with […]

🟠 High   ⏱ 15–60 min  Last verified: 21 April 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:0355-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-1484 CVE-2026-1489 CVE-2025-13601 CVE-2025-14087 CVE-2025-6052 CVE-2024-52533 CVE-2023-32643 CVE-2019-13012  +12 more Upstream summary: A flaw was found in the GLib Base64 encoding routine when processing very […]