OT
Product
openSUSE Tumbleweed
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 6Low 0
Watch
Add openSUSE Tumbleweed to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-23386 | 7.8 | Apr 10 | gerbera: Privilege escalation from user gerbera to root because of insecure %post script Affected: ? before 2.5.0-1.1 |
| CVE-2024-22029 | 7.8 | Oct 16 | tomcat packaging allows for escalation to root from tomcat user Affected: ? before 9.0.85-3.1 |
| CVE-2023-32190 | 7.8 | Oct 16 | mlocate's %post script allows RUN_UPDATEDB_AS user to make arbitrary files world readable Affected: ? before 0.26-37.1 |
| CVE-2026-59674 | 7.1 | Jul 14 | LPE from suricata user to root due to chown in %post in suricata packaging Affected: ? before 8.0.5-2.1; ? before 8.0.5-2.1 |
| CVE-2024-49504 | 7.0 | Nov 13 | grub2 allows bypassing TPM-bound disk encryption on SL(E)M encrypted Images Affected: ? before 2.12-28.1 |
Showing 5