CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,436 CVEs published, 358 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,436
Show in the list
Critical, last 7 days
358
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product suse:linux_enterprise_desktop. Show all products

44 CVEs, showing 1 to 44
CVESeverityTitlePublished
CVE-2026-31431
Known exploited
High 7.8crypto: algif_aead - Revert to operating out-of-place
Assigned by Linux
Apr 22, 2026
CVE-2025-32463
Known exploited
Critical 9.3Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.
Assigned by mitre
Jun 30, 2025
CVE-2021-4034
Known exploited
High 7.8A local privilege escalation vulnerability was found on polkit's pkexec utility.
Assigned by redhat
Jan 28, 2022
CVE-2018-19543High 7.8An issue was discovered in JasPer 2.0.14.
Assigned by mitre
Nov 26, 2018
CVE-2018-19542Medium 6.5An issue was discovered in JasPer 2.0.14.
Assigned by mitre
Nov 26, 2018
CVE-2018-19540High 8.8An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.2…
Assigned by mitre
Nov 26, 2018
CVE-2018-19541High 8.8An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.2…
Assigned by mitre
Nov 26, 2018
CVE-2018-19539Medium 6.5An issue was discovered in JasPer 2.0.14.
Assigned by mitre
Nov 26, 2018
CVE-2016-4171
Known exploited
High 7.8Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.
Assigned by adobe
Jun 16, 2016
CVE-2016-0718Critical 9.8Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.
Assigned by redhat
May 26, 2016
CVE-2016-4117
Known exploited
High 7.8Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.
Assigned by adobe
May 11, 2016
CVE-2016-3718
Known exploited
Medium 5.5The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.
Assigned by redhat
May 5, 2016
CVE-2016-3715
Known exploited
Medium 5.5The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.
Assigned by redhat
May 5, 2016
CVE-2016-3427
Known exploited
Critical 9.8Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vector…
Assigned by oracle
Apr 21, 2016
CVE-2015-8651
Known exploited
High 8.8Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20…
Assigned by adobe
Dec 28, 2015
CVE-2015-8126High 7.5Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x…
Assigned by mitre
Nov 13, 2015
CVE-2015-7645
Known exploited
High 7.8Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code via a crafted SWF f…
Assigned by adobe
Oct 15, 2015
CVE-2015-4495
Known exploited
High 8.8The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain p…
Assigned by mozilla
Aug 8, 2015
CVE-2015-5477
Known exploited
High 7.5named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.
Assigned by mitre
Jul 29, 2015
CVE-2015-2590
Known exploited
Critical 9.8Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors…
Assigned by oracle
Jul 16, 2015
CVE-2015-5123
Known exploited
High 7.8Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows a…
Assigned by adobe
Jul 14, 2015
CVE-2015-5122
Known exploited
High 7.8Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Window…
Assigned by adobe
Jul 14, 2015
CVE-2015-5119
Known exploited
High 7.8Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows and OS X and 11.x t…
Assigned by adobe
Jul 8, 2015
CVE-2015-3113
Known exploited
High 7.8Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbi…
Assigned by adobe
Jun 23, 2015
CVE-2015-0313
Known exploited
High 7.8Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute ar…
Assigned by adobe
Feb 2, 2015
CVE-2015-0311
Known exploited
High 7.8Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute…
Assigned by adobe
Jan 23, 2015
CVE-2014-7169
Known exploited
Critical 9.8GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or poss…
Assigned by mitre
Sep 25, 2014
CVE-2014-6271
Known exploited
Critical 9.8GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, a…
Assigned by debian
Sep 24, 2014
CVE-2014-3153
Known exploited
High 7.8The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafte…
Assigned by Chrome
Jun 7, 2014
CVE-2014-0502
Known exploited
High 8.8Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on…
Assigned by adobe
Feb 21, 2014
CVE-2014-0497
Known exploited
High 8.8Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute ar…
Assigned by adobe
Feb 5, 2014
CVE-2013-1690
Known exploited
High 8.8Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in conjunction with pag…
Assigned by mozilla
Jun 26, 2013
CVE-2013-2465
Known exploited
Critical 9.8Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remo…
Assigned by oracle
Jun 18, 2013
CVE-2013-2729
Known exploited
High 8.8Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerabilit…
Assigned by adobe
May 16, 2013
CVE-2013-0648
Known exploited
High 8.8Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and…
Assigned by adobe
Feb 27, 2013
CVE-2013-0643
Known exploited
High 8.8The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, does not properly rest…
Assigned by adobe
Feb 27, 2013
CVE-2013-0641
Known exploited
High 7.8Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in…
Assigned by adobe
Feb 14, 2013
CVE-2013-0640
Known exploited
High 7.8Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted…
Assigned by adobe
Feb 14, 2013
CVE-2012-5076
Known exploited
Critical 9.8Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability, rela…
Assigned by oracle
Oct 16, 2012
CVE-2012-1535
Known exploited
High 7.8Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of ser…
Assigned by mitre
Aug 15, 2012
CVE-2012-2034
Known exploited
High 7.5Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and be…
Assigned by adobe
Jun 9, 2012
CVE-2012-0507
Known exploited
Critical 9.8Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to a…
Assigned by oracle
Jun 7, 2012
CVE-2011-0611
Known exploited
High 8.8Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe R…
Assigned by adobe
Apr 13, 2011
CVE-2010-3904
Known exploited
High 7.8The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from u…
Assigned by canonical
Dec 6, 2010

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.