SLES

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2022-47630 CVE-2022-23960 Upstream summary: Trusted Firmware-A through 2.8 has an out-of-bounds read in the X.509 parser for parsing boot certificates. This affects downstream use of get_ext and auth_nvctr. Attackers […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:3355-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-27023 CVE-2020-7942 CVE-2011-3848 CVE-2011-3872 CVE-2012-3864 CVE-2012-3865 CVE-2012-3866 CVE-2013-3567  +6 more Upstream summary: A flaw was discovered in Puppet Agent and Puppet Server that may result […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:6259 (see also SUSE bugzilla) Related CVEs: CVE-2026-2920 CVE-2026-2922 CVE-2023-38103 CVE-2023-38104 Upstream summary: GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:0145-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-45417 Upstream summary: AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:0002 (see also SUSE bugzilla) Related CVEs: CVE-2025-45582 CVE-2022-48303 CVE-2010-0624 CVE-2016-6321 CVE-2021-20193 CVE-2023-39804 CVE-2018-20482 CVE-2019-9923 Upstream summary: GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:15900 (see also SUSE bugzilla) Related CVEs: CVE-2025-9566 CVE-2019-10152 CVE-2021-20206 CVE-2022-1227 CVE-2022-21698 CVE-2024-11218 CVE-2024-1753 CVE-2024-3727  +12 more Upstream summary: There's a vulnerability in podman where an attacker may use the kube play […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1347-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-34714 CVE-2026-34982 CVE-2023-4750 CVE-2024-22667 CVE-2023-5535 CVE-2023-4733 CVE-2023-4738 CVE-2023-4752  +12 more Upstream summary: Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:1842 (see also SUSE bugzilla) Related CVEs: CVE-2025-55130 CVE-2025-55131 CVE-2025-59465 CVE-2025-23083 CVE-2025-23166 CVE-2025-59466 CVE-2026-21637 CVE-2026-22036  +11 more Upstream summary: A flaw in Node.js's Permissions model allows attackers to bypass `–allow-fs-read` and `–allow-fs-write` […]