SUSE Linux Enterprise vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting SUSE Linux Enterprise: 7 record(s), with affected versions and fixes.cpe:2.3:o:suse:linux_enterprise
CVE-2026-44933
High · 7.8
CWE-35 May 20, 2026
Path Traversal in Plugin Loading in libzypp
`PluginScript` attempts to `chroot` the plugin to the `repoManagerRoot`, this root is frequently `/` (the system root) in standard configurations or when using `--root`. If the chroot target is `/`, it is a no-op, allowing the traversed path to execute host binaries (like `/bin/bash`) with root privileges.
CVE-2021-4166
High · 7.1
CWE-125 Dec 25, 2021
Out-of-bounds Read in vim/vim
vim is vulnerable to Out-of-bounds Read
CVE-2016-5131
High · 8.8
CWE-416 Jul 23, 2016
Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743...
Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function.
CVE-2011-0609
High · 7.8
KEV Urgent · 86 Public exploit Mar 15, 2011
Adobe Flash Player Unspecified Vulnerability
Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.
CVE-2010-1297
High · 7.8
KEV Urgent · 76 Public exploit CWE-787 Jun 8, 2010
Adobe Flash Player Memory Corruption Vulnerability
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, related to authplay.dll and the ActionScript Virtual Machine 2 (AVM2) newfunction instruction, as exploited in the wild in June 2010.
CVE-2009-3953
High · 8.8
KEV Urgent · 76 Public exploit CWE-787 Jan 13, 2010
Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability
The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document, related to a CLODProgressiveMeshDeclaration "array boundary issue," a different vulnerability than CVE-2009-2994.
CVE-2009-4324
High · 7.8
KEV Urgent · 86 Public exploit CWE-416 Dec 15, 2009
Adobe Acrobat and Reader Use-After-Free Vulnerability
Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild in December 2009.