O
Vendor security profile6 actively exploited CVEs
opensuse
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs78
Critical9
CISA KEV6
Public exploit34
Patch rate%77
Avg. CVSS6.5
12-month vulnerability rate
0
0
0
1
0
1
3
1
2
0
0
0
CVE KEV
CVE severity distribution
78toplam CVE
Critical9 (12%)
High24 (31%)
Medium44 (56%)
Low1 (1%)
Patch and exploitation view
%77
Verified patch
%8
CISA KEV
%44
Public exploit
60Patch available
0Partial
2Workaround
0Vendor: no patch
16Unknown
Latest vulnerabilities
7.5
CVE-2026-48863
Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service
O
Patch verifiedEPSS %1
8.8
CVE-2026-44941
Vulnerability in Opensuse Libzypp
O
Patch verifiedEPSS %1
8.8
CVE-2026-25707
Vulnerability in Opensuse Libzypp
O
Patch verifiedEPSS %1
7.8
CVE-2026-48864
Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data
RH
Patch status unknownEPSS %0
6.5
CVE-2026-9149
Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file
RH
Patch verifiedEPSS %1
6.5
CVE-2026-9150
Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums
RH
Patch verifiedEPSS %1
7.8
CVE-2026-31431 Actively exploited
crypto: algif_aead - Revert to operating out-of-place
L
Patch verifiedEPSS %3
7.8
CVE-2026-25506
Out-of-bounds write in Opensuse Munge
O
Patch verifiedEPSS %0
7.1
CVE-2021-4166
Out-of-bounds Read in vim/vim
V
Patch verifiedEPSS %2
3.3
CVE-2021-25317
cups: ownership of /var/log/cups allows the lp user to create files as root
S
Patch status unknownEPSS %0