🟡 Medium ⏱ 10–30 min Last verified: 11 June 2026 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1343-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-40393 CVE-2023-45913 CVE-2023-45919 CVE-2023-45922 CVE-2019-5068 Upstream summary: In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount […]
🔴 Critical ⏱ 15–90 min Last verified: 11 June 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:1459-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-25725 CVE-2023-0056 CVE-2019-14241 CVE-2020-11100 CVE-2021-40346 CVE-2026-33555 CVE-2025-11230 CVE-2025-32464 +5 more Upstream summary: HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers […]
🟠 High ⏱ 15–60 min Last verified: 11 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory RHSA-2026:10739 (see also SUSE bugzilla) Related CVEs: CVE-2026-34001 CVE-2025-62229 CVE-2025-62230 CVE-2025-62231 CVE-2021-3472 CVE-2021-4008 CVE-2021-4009 CVE-2021-4010 +12 more Upstream summary: A flaw was found in the X.Org X server. This use-after-free vulnerability occurs […]
🔴 Critical ⏱ 15–90 min Last verified: 11 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2019:719-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-7409 CVE-2018-7485 CVE-2011-1145 Upstream summary: In unixODBC before 2.3.5, there is a buffer overflow in the unicode_to_ansi_copy() function in DriverManager/__info.c. Table of contents Symptom & […]
🟡 Medium ⏱ 10–30 min Last verified: 10 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2017:1568-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-0254 Upstream summary: Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted […]
🟠 High ⏱ 15–60 min Last verified: 10 June 2026 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory RHSA-2025:9329 (see also SUSE bugzilla) Related CVEs: CVE-2025-40908 CVE-2012-1152 Upstream summary: YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified Table of contents Symptom & Impact […]
🟠 High ⏱ 15–60 min Last verified: 10 June 2026 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory RHSA-2026:10711 (see also SUSE bugzilla) Related CVEs: CVE-2026-4786 CVE-2026-6100 CVE-2025-11468 CVE-2025-4138 CVE-2025-4330 CVE-2025-4435 CVE-2025-4517 CVE-2024-6232 +12 more Upstream summary: Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could […]
🔴 Critical ⏱ 15–90 min Last verified: 10 June 2026 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2014-0011 CVE-2020-26117 CVE-2026-34352 CVE-2014-8240 CVE-2019-15691 CVE-2019-15692 CVE-2019-15693 CVE-2019-15694 +2 more Upstream summary: Multiple heap-based buffer overflows in the ZRLE_DECODE function in common/rfb/zrleDecode.h in TigerVNC before […]
🟠 High ⏱ 15–60 min Last verified: 9 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:2854-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-1000518 Upstream summary: aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Servers and clients, unless configured […]
🟡 Medium ⏱ 10–30 min Last verified: 9 June 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2015:1545-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-6496 Upstream summary: conntrackd in conntrack-tools 1.4.2 and earlier does not ensure that the optional kernel modules are loaded before using them, which allows remote […]
