Opensuse vulnerabilities57 known to be exploited.
Opensuse has 3,288 published vulnerabilities across 51 products in our catalogue. 57 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Leap, with 1,919. If you run Opensuse software, patch the exploited flaws first.
The most recent Opensuse flaw added to the known-exploited list is CVE-2025-32463, on 29 September 2025. We keep watching the known-exploited list.
Which Opensuse products have the most vulnerabilities?
Leap leads with 1,919 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Opensuse vulnerabilities are being exploited?
57 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 9.3Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability
Sudo contains an inclusion of functionality from untrusted control sphere vulnerability.
- 7.5Rails Ruby on Rails Path Traversal Vulnerability
Rails Ruby on Rails contains a path traversal vulnerability in Action View.
- 9.8Adobe Flash Player Integer Underflow Vulnerablity
Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code.
- 8.8Adobe Flash Player Code Execution Vulnerability
Adobe Flash Player contains an unspecified vulnerability in the ExternalInterface ActionScript functionality that allows a remote attacker to execute arbitrary code via crafted SWF content.
- 8.8Adobe Flash Player Incorrect Default Permissions Vulnerability
Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows a remote attacker to execute arbitrary code via crafted SWF content.
- 8.8Adobe Flash Player Double Free Vulnerablity
Adobe Flash Player contains a double free vulnerability that allows a remote attacker to execute arbitrary code.
- 8.4ImageMagick Improper Input Validation Vulnerability
ImageMagick contains an improper input validation vulnerability that affects the EPHEMERAL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, and PLT coders.
- 9.8Roundcube Webmail Remote Code Execution Vulnerability
Roundcube Webmail contains an remote code execution vulnerability that allows attackers to execute code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path.
Which Opensuse flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- >99%
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle...
- >99%
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via...
- >99%
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by...
- >99%
sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote...
- >99%CVE-2014-0195Medium
The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly validate fragment lengths in DTLS ClientHello messages, which allows...
- >99%
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown...
- >99%
Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via...
- 99%CVE-2011-3192High
The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses...
- 98%CVE-2013-5211Medium
The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as...
All Opensuse products we track.
43 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Leapleap1,919 vulnerabilities11 versions
- Opensuseopensuse1,465 vulnerabilities16 versions
- Backports Slebackports_sle329 vulnerabilities1 version
- Backportsbackports97 vulnerabilities1 version
- Evergreenevergreen43 vulnerabilities1 version
- Open Build Serviceopen_build_service22 vulnerabilities154 versions
- Libsolvlibsolv10 vulnerabilities57 versions
- Supportutilssupportutils6 vulnerabilities4 versions
- Libzypplibzypp5 vulnerabilities763 versions
- Tumbleweedtumbleweed5 vulnerabilities2 versions
- Libeconflibeconf4 vulnerabilities1 version
- Openldap2openldap23 vulnerabilities7 versions
- Suse Linux Enterprise Serversuse_linux_enterprise_server3 vulnerabilities2 versions
- Zypperzypper3 vulnerabilities6 versions
- Cryptctlcryptctl2 vulnerabilities7 versions
- Cscreencscreen2 vulnerabilities2 versions
- Oscosc2 vulnerabilities4 versions
- Pcppcp2 vulnerabilities5 versions
- Rmt-Serverrmt-server2 vulnerabilities4 versions
- Texlive-Filesystemtexlive-filesystem2 vulnerabilities3 versions
- Wickedwicked2 vulnerabilities98 versions
- Autoyast2autoyast21 vulnerability2 versions
- Cannacanna1 vulnerability3 versions
- Hylafax+hylafax\+1 vulnerability3 versions
This directory lists the 43 Opensuse products with at least one tracked version, of 51 in our catalogue.
Running Opensuse? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Sudo contains an inclusion of functionality from untrusted control sphere vulnerability. This vulnerability could allow local attacker to leverage sudo’s -R (--chroot) option to run arbitrary commands as root, even if they are not listed in the sudoers file.
- Matched to
- Opensuse on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 3,288 published vulnerabilities across 51 products and 1,778 versions from Opensuse. The most recent Opensuse flaw added to the known-exploited list is CVE-2025-32463, on 29 September 2025.
57 Opensuse vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2025-32463, CVE-2019-5418 and CVE-2014-0497. The full list is on this page.
Leap, with 1,919 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a EdgeProtect account and track the Opensuse products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.