SLES

🟡 Medium   ⏱ 10–30 min  Last verified: 4 February 2026 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2016:1100-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-3190 CVE-2016-9082 CVE-2017-7475 CVE-2017-9814 CVE-2019-6461 CVE-2025-50422 CVE-2019-6462 Upstream summary: The fill_xrgb32_lerp_opaque_spans function in cairo-image-compositor.c in cairo before 1.14.2 allows remote attackers to cause a denial […]

🟠 High   ⏱ 15–60 min  Last verified: 4 February 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:2719 (see also SUSE bugzilla) Related CVEs: CVE-2026-24882 CVE-2026-24883 CVE-2025-68973 CVE-2006-0455 CVE-2010-2547 CVE-2013-4402 CVE-2018-12020 CVE-2020-25125  +9 more Upstream summary: In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling […]

🔴 Critical   ⏱ 15–90 min  Last verified: 4 February 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2018:0822-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-1000140 Upstream summary: rsyslog librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in the checking of x509 certificates from a peer that can […]

🟠 High   ⏱ 15–60 min  Last verified: 3 February 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2019-25058 Upstream summary: An issue was discovered in USBGuard before 1.1.0. On systems with the usbguard-dbus daemon running, an unprivileged user could make USBGuard allow […]

🟠 High   ⏱ 15–60 min  Last verified: 3 February 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory RHSA-2024:10384 (see also SUSE bugzilla) Related CVEs: CVE-2024-52336 CVE-2024-52337 Upstream summary: A script injection vulnerability was identified in the Tuned package. The `instance_create()` D-Bus function can be called by locally logged-in users […]

🔴 Critical   ⏱ 15–90 min  Last verified: 3 February 2026 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2021:385-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-12400 CVE-2020-12401 CVE-2020-12403 CVE-2020-6829 CVE-2026-2781 CVE-2025-9187 CVE-2023-0767 CVE-2022-31741  +12 more Upstream summary: When converting coordinates from projective to affine, the modular inversion was not performed […]

🔴 Critical   ⏱ 15–90 min  Last verified: 3 February 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:1472 (see also SUSE bugzilla) Related CVEs: CVE-2025-15467 CVE-2021-3711 CVE-2026-28388 CVE-2026-31789 CVE-2025-9230 CVE-2024-12797 CVE-2024-9143 CVE-2024-41996  +12 more Upstream summary: Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters […]

🟡 Medium   ⏱ 10–30 min  Last verified: 2 February 2026 Affected versions: SLES 15 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:0821-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-0633 CVE-2023-33461 Upstream summary: Heap-based Buffer Overflow vulnerability in iniparser_dumpsection_ini() in iniparser allows attacker to read out of bound memory Table of contents Symptom & […]

🟡 Medium   ⏱ 10–30 min  Last verified: 2 February 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2024:14537-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-5115 CVE-2023-5764 CVE-2024-0690 CVE-2024-11079 CVE-2024-8775 CVE-2024-9902 Upstream summary: An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to […]

🟠 High   ⏱ 15–60 min  Last verified: 2 February 2026 Affected versions: SLES 16 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:1357-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-11490 CVE-2023-48161 CVE-2026-23868 CVE-2015-7555 CVE-2016-3977 CVE-2019-15133 CVE-2022-28506 CVE-2021-40633 Upstream summary: The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c […]