The openSUSE Project's vulnerability footprint encompasses a modest but strategically significant portfolio of Linux distributions and development platforms, spanning Leap, openSUSE, and SUSE Linux Enterprise variants for servers, desktops, and software development. While the vendor maintains a relatively contained product line, its distributions sit at the foundation of many enterprise and developer environments, placing these disclosures in high-visibility contexts. Vulnerabilities affecting the vendor skew toward serious outcomes, with a meaningful share reaching critical severity, and recur through memory-safety and input-handling weakness classes including buffer-boundary violations, improper input validation, cross-site scripting, and out-of-bounds reads—patterns reflective of the attack surface exposed by bundling large volumes of system and third-party software. Defenders should treat openSUSE and SUSE Linux Enterprise advisories with priority given the depth of integration these distributions achieve in server and workstation deployments. Current severity and exploitation figures are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Opensuse Project over time
Signals from CVEs in this vendor scope (3300 CVEs).
3,300 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-31431HIGH In the Linux kernel, the following vulnerability has been resolved:
crypto: algif_aead - Revert to operating out-of-place
This mostly reverts commit 72548b093ee3 except for the c | Apr 22, 2026 | 7.8 | 99 | YES | YES |
CVE-2020-1472CRITICAL An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protoc | Aug 17, 2020 | 10.0 | 99 | YES | YES |
CVE-2020-1938CRITICAL When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for e | Feb 24, 2020 | 9.8 | 99 | YES | YES |
CVE-2019-5418HIGH There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrar | Mar 27, 2019 | 7.5 | 99 | YES | YES |
CVE-2014-6271CRITICAL GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a cra | Sep 24, 2014 | 9.8 | 99 | YES | YES |
CVE-2014-0160HIGH The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive inform | Apr 7, 2014 | 7.5 | 99 | YES | YES |
CVE-2012-1823CRITICAL sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) | May 11, 2012 | 9.8 | 99 | YES | YES |
CVE-2020-16846CRITICAL An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection. | Nov 6, 2020 | 9.8 | 98 | YES | YES |
CVE-2020-11651CRITICAL An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a re | Apr 30, 2020 | 9.8 | 98 | YES | YES |
CVE-2016-4117CRITICAL Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016. | May 11, 2016 | 9.8 | 98 | YES | YES |
Signals from CVEs in this vendor scope (3300 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Opensuse Project.
Media articles that mention a CVE ID that affects a product developed by Opensuse Project — matched by CVE ID, not by vendor name.