CVE Intelligence

Vulnerabilidades do SUSE openSUSE

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam SUSE openSUSE: 2 registro(s), com versões afetadas e correções.

CVE-2026-44933 Alta · 7.8 CWE-35 20/05/2026
Path Traversal in Plugin Loading in libzypp
`PluginScript` attempts to `chroot` the plugin to the `repoManagerRoot`, this root is frequently `/` (the system root) in standard configurations or when using `--root`. If the chroot target is `/`, it is a no-op, allowing the traversed path to execute host binaries (like `/bin/bash`) with root privileges.
CVE-2025-62876 Média · 5.3 CWE-250 12/11/2025
Execution with Unnecessary Privileges em SUSE openSUSE
A Execution with Unnecessary Privileges vulnerability in lightdm-kde-greeter allows escalation from the service user to root.This issue affects lightdm-kde-greeter. before 6.0.4.