Suse vulnerabilities47 known to be exploited.
Suse has 1,184 published vulnerabilities across 128 products in our catalogue. 47 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Linux Enterprise Server, with 498. If you run Suse software, patch the exploited flaws first.
The most recent Suse flaw added to the known-exploited list is CVE-2025-32463, on 29 September 2025. We keep watching the known-exploited list.
Which Suse products have the most vulnerabilities?
Linux Enterprise Server leads with 498 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Suse vulnerabilities are being exploited?
47 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 9.3Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability
Sudo contains an inclusion of functionality from untrusted control sphere vulnerability.
- 9.8Adobe Flash Player Integer Underflow Vulnerablity
Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code.
- 8.8Adobe Flash Player Code Execution Vulnerability
Adobe Flash Player contains an unspecified vulnerability in the ExternalInterface ActionScript functionality that allows a remote attacker to execute arbitrary code via crafted SWF content.
- 8.8Adobe Flash Player Double Free Vulnerablity
Adobe Flash Player contains a double free vulnerability that allows a remote attacker to execute arbitrary code.
- 8.8Adobe Flash Player Incorrect Default Permissions Vulnerability
Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows a remote attacker to execute arbitrary code via crafted SWF content.
- 8.4ImageMagick Improper Input Validation Vulnerability
ImageMagick contains an improper input validation vulnerability that affects the EPHEMERAL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, and PLT coders.
- 7.5Service Location Protocol (SLP) Denial-of-Service Vulnerability
The Service Location Protocol (SLP) contains a denial-of-service (DoS) vulnerability that could allow an unauthenticated, remote attacker to register services and use spoofed UDP traffic to conduct a...
- 9.8Oracle Java SE and JRockit Unspecified Vulnerability
Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions (JMX).
Which Suse flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- >99%
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by...
- >99%
sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote...
- >99%
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown...
- >99%
Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via...
- >99%
The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct...
- >99%
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via...
- 99%CVE-2011-3192High
The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses...
- 99%
Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows and OS X and 11.x through...
All Suse products we track.
100 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Linux Enterprise Serverlinux_enterprise_server498 vulnerabilities8 versions
- Linux Enterprise Desktoplinux_enterprise_desktop465 vulnerabilities8 versions
- Linux Enterprise Software Development Kitlinux_enterprise_software_development_kit302 vulnerabilities5 versions
- Suse Linuxsuse_linux217 vulnerabilities37 versions
- Suse Linux Enterprise Serversuse_linux_enterprise_server143 vulnerabilities5 versions
- Linux Enterpriselinux_enterprise139 vulnerabilities6 versions
- Linux Enterprise Workstation Extensionlinux_enterprise_workstation_extension104 vulnerabilities2 versions
- Suse Linux Enterprise Desktopsuse_linux_enterprise_desktop82 vulnerabilities6 versions
- Linux Enterprise Real Time Extensionlinux_enterprise_real_time_extension58 vulnerabilities4 versions
- Linux Enterprise Debuginfolinux_enterprise_debuginfo56 vulnerabilities3 versions
- Suse Linux Enterprise Software Development Kitsuse_linux_enterprise_software_development_kit35 vulnerabilities4 versions
- Openstack Cloudopenstack_cloud34 vulnerabilities6 versions
- Linux Enterprise High Availability Extensionlinux_enterprise_high_availability_extension28 vulnerabilities3 versions
- Rancherrancher27 vulnerabilities200 versions
- Managermanager22 vulnerabilities3 versions
- Studio Onsitestudio_onsite22 vulnerabilities8 versions
- Linux Enterprise SDKlinux_enterprise_sdk19 vulnerabilities2 versions
- Manager Proxymanager_proxy18 vulnerabilities4 versions
- Suse Linux Workstation Extensionsuse_linux_workstation_extension17 vulnerabilities1 version
- Manager Servermanager_server16 vulnerabilities19 versions
- Linux Enterprise Point of Salelinux_enterprise_point_of_sale14 vulnerabilities1 version
- Linux Enterprise High Performance Computinglinux_enterprise_high_performance_computing11 vulnerabilities3 versions
- Caas Platformcaas_platform7 vulnerabilities5 versions
- Linux Enterprise Real Timelinux_enterprise_real_time6 vulnerabilities3 versions
This directory lists the 100 Suse products with at least one tracked version, of 128 in our catalogue.
Running Suse? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Sudo contains an inclusion of functionality from untrusted control sphere vulnerability. This vulnerability could allow local attacker to leverage sudo’s -R (--chroot) option to run arbitrary commands as root, even if they are not listed in the sudoers file.
- Matched to
- Suse on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 1,184 published vulnerabilities across 128 products and 963 versions from Suse. The most recent Suse flaw added to the known-exploited list is CVE-2025-32463, on 29 September 2025.
47 Suse vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2025-32463, CVE-2014-0497 and CVE-2013-0648. The full list is on this page.
Linux Enterprise Server, with 498 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a EdgeProtect account and track the Suse products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.