SLES

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:0579-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-12178 CVE-2026-25833 CVE-2026-25835 CVE-2026-34874 CVE-2022-36765 CVE-2022-36764 CVE-2022-36763 CVE-2023-45230  +12 more Upstream summary: Buffer overflow in network stack for EDK II may allow unprivileged user to […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:10217 (see also SUSE bugzilla) Related CVEs: CVE-2026-27140 CVE-2026-27143 CVE-2026-32280 CVE-2026-27144 CVE-2026-32281 CVE-2026-32282 CVE-2026-32283 CVE-2026-32288  +5 more Upstream summary: SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1170-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-2474 Upstream summary: Crypt::URandom versions from 0.41 before 0.55 for Perl is vulnerable to a heap buffer overflow in the XS function crypt_urandom_getrandom(). The function […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:13515 (see also SUSE bugzilla) Related CVEs: CVE-2026-33554 Upstream summary: ipmi-oem in FreeIPMI before 1.16.17 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2019:719-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-7409 CVE-2018-7485 Upstream summary: In unixODBC before 2.3.5, there is a buffer overflow in the unicode_to_ansi_copy() function in DriverManager/__info.c. Table of contents Symptom & Impact […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2022-45299 Upstream summary: An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL. Table […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:2898-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-12472 CVE-2018-12470 CVE-2018-12471 CVE-2014-3566 Upstream summary: A improper authentication using the HOST header in SUSE Linux SMT allows remote attackers to spoof a sibling server. […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2019:1717-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-12447 CVE-2019-12449 CVE-2026-28296 CVE-2019-12448 CVE-2026-28295 CVE-2019-12795 CVE-2019-3827 Upstream summary: An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles file ownership because setfsuid […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory BLOG-LOG4SHELL (see also SUSE bugzilla) Related CVEs: CVE-2021-44228 CVE-2019-17571 CVE-2022-23305 CVE-2022-23307 CVE-2021-45105 CVE-2021-45046 CVE-2026-34477 CVE-2026-34479  +7 more Upstream summary: Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI […]