What’s Vulnerable › Products

openSUSE Leap vulnerabilities

1898 known vulnerabilities, 19 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your openSUSE Leap version is affected

Exploited openSUSE Leap vulnerabilities

• CVE-2026-31431 — Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
• CVE-2025-32463 — Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability
• CVE-2019-5418 — Rails Ruby on Rails Path Traversal Vulnerability
• CVE-2016-3714 — ImageMagick Improper Input Validation Vulnerability
• CVE-2020-12641 — Roundcube Webmail Remote Code Execution Vulnerability
• CVE-2016-3427 — Oracle Java SE and JRockit Unspecified Vulnerability
• CVE-2016-1646 — Google Chromium V8 Out-of-Bounds Read Vulnerability
• CVE-2019-13720 — Google Chrome WebAudio Use-After-Free Vulnerability
• CVE-2016-0752 — Ruby on Rails Directory Traversal Vulnerability
• CVE-2020-1938 — Apache Tomcat Improper Privilege Management Vulnerability
• CVE-2015-4902 — Oracle Java SE Integrity Check Vulnerability
• CVE-2020-16846 — SaltStack Salt Shell Injection Vulnerability
• CVE-2020-16009 — Google Chromium V8 Type Confusion Vulnerability
• CVE-2020-1472 — Microsoft Netlogon Privilege Escalation Vulnerability
• CVE-2020-11652 — SaltStack Salt Path Traversal Vulnerability
• CVE-2020-11651 — SaltStack Salt Authentication Bypass Vulnerability
• CVE-2019-0211 — Apache HTTP Server Privilege Escalation Vulnerability
• CVE-2016-3718 — ImageMagick Server-Side Request Forgery (SSRF) Vulnerability
• CVE-2016-3715 — ImageMagick Arbitrary File Deletion Vulnerability

Latest openSUSE Leap vulnerabilities

• CVE-2026-31431 — Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability (CVSS 7.8) — exploited
• CVE-2025-32463 — Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability (CVSS 7.8) — exploited
• CVE-2023-32182 — (CVSS 7.8)
• CVE-2022-45153 — saphanabootstrap-formula: Escalation to root for arbitrary users in hana/ha_cluster.sls (CVSS 7.8)
• CVE-2022-31252 — permissions: chkstat does not check for group-writable parent directories or target files in safeOpen() (CVSS 4.4)
• CVE-2021-46142 — (CVSS 5.5)
• CVE-2021-46141 — (CVSS 5.5)
• CVE-2021-41819 — (CVSS 7.5)
• CVE-2021-41817 — (CVSS 7.5)
• CVE-2021-26676 — (CVSS 6.5)
• CVE-2021-26675 — (CVSS 8.8)
• CVE-2020-0569 — (CVSS 5.7)
• CVE-2020-16846 — SaltStack Salt Shell Injection Vulnerability (CVSS 9.8) — exploited
• CVE-2020-28049 — (CVSS 6.3)
• CVE-2020-16011 — (CVSS 9.6)
• CVE-2020-16009 — Google Chromium V8 Type Confusion Vulnerability (CVSS 8.8) — exploited
• CVE-2020-16008 — (CVSS 8.8)
• CVE-2020-16007 — (CVSS 7.8)
• CVE-2020-16006 — (CVSS 8.8)
• CVE-2020-16005 — (CVSS 8.8)
• CVE-2020-16004 — (CVSS 8.8)
• CVE-2020-14323 — (CVSS 5.5)
• CVE-2020-27673 — (CVSS 5.5)
• CVE-2020-27672 — (CVSS 7.0)
• CVE-2020-27671 — (CVSS 7.8)