Suse linux enterprise desktop

This hub aggregates every CVE we track for Suse linux enterprise desktop, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Suse linux enterprise desktop.

• CVE-2026-41054Missing exit out of permission check in haveged could lead to root exploit7.8May 20, 2026
• CVE-2026-6638PostgreSQL REFRESH PUBLICATION allows SQL injection via table name3.7May 14, 2026
• CVE-2026-6637PostgreSQL refint allows stack buffer overflow and SQL injection8.8May 14, 2026
• CVE-2026-6575PostgreSQL pg_restore_attribute_stats accepts values that cause query planning to read past end of stats array4.3May 14, 2026
• CVE-2026-6479PostgreSQL SSL/GSS init causes denial of service, via uncontrolled recursion7.5May 14, 2026
• CVE-2026-6478PostgreSQL discloses MD5-hashed passwords via covert timing channel6.5May 14, 2026
• CVE-2026-6477PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory8.8May 14, 2026
• CVE-2026-6476PostgreSQL pg_createsubscriber allows SQL injection via subscription name7.2May 14, 2026
• CVE-2026-6475PostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choice8.8May 14, 2026
• CVE-2026-6474PostgreSQL timeofday() can disclose portions of server memory4.3May 14, 2026
• CVE-2026-6473PostgreSQL server undersizes allocations, via integer wraparound8.8May 14, 2026
• CVE-2026-6472PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege5.4May 14, 2026
• CVE-2026-31431crypto: algif_aead - Revert to operating out-of-placeKEV7.8Apr 22, 2026
• CVE-2026-22008Vulnerability in Oracle Java SE (component: Libraries). The supported version that is affected is Oracle Java SE: 25.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with n...3.7Apr 21, 2026
• CVE-2026-34757LIBPNG has a yse-after-free in png_set_PLTE, png_set_tRNS and png_set_hIST leading to corrupted chunk data and potential heap information disclosure5.1Apr 9, 2026