# Leap vulnerabilities > Leap is made by Opensuse. We track 1,919 published vulnerabilities listed under that exact name, across 11 versions. 18 of them are on the list of flaws known to be exploited, the newest added on 29 September 2025. Opensuse lists newer releases under their own names, such as Leap Micro, so check those pages too. Canonical page: https://www.precursorintelligence.com/product/opensuse/leap ## At a glance - **Made by:** [Opensuse](https://www.precursorintelligence.com/vendors/opensuse) - **Published vulnerabilities:** 1,919 - **Known to be exploited:** 18 (listed under the name Leap) - **Versions tracked:** 11 - **Most recently added to the known-exploited list:** [CVE-2025-32463](https://www.precursorintelligence.com/what-is/cve-2025-32463), 29 September 2025. We keep watching the list. ## Is Leap listed under other names? Opensuse also lists Leap under more specific names, such as Leap Micro. Flaws listed only under those names are counted on their own pages, not here. - [Leap Micro](https://www.precursorintelligence.com/product/opensuse/leap_micro): 1 published vulnerability ## Which versions of Leap do the exploited flaws hit? Each exploited flaw lists the versions it affects, as published. - [CVE-2025-32463](https://www.precursorintelligence.com/what-is/cve-2025-32463) (Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability): 15.6 - [CVE-2019-5418](https://www.precursorintelligence.com/what-is/cve-2019-5418) (Rails Ruby on Rails Path Traversal Vulnerability): 15.0 - [CVE-2016-3714](https://www.precursorintelligence.com/what-is/cve-2016-3714) (ImageMagick Improper Input Validation Vulnerability): 42.1 - [CVE-2020-12641](https://www.precursorintelligence.com/what-is/cve-2020-12641) (Roundcube Webmail Remote Code Execution Vulnerability): 15.1, 15.2 - [CVE-2016-3427](https://www.precursorintelligence.com/what-is/cve-2016-3427) (Oracle Java SE and JRockit Unspecified Vulnerability): 42.1 - [CVE-2016-1646](https://www.precursorintelligence.com/what-is/cve-2016-1646) (Google Chromium V8 Out-of-Bounds Read Vulnerability): 42.1 - [CVE-2019-13720](https://www.precursorintelligence.com/what-is/cve-2019-13720) (Google Chrome WebAudio Use-After-Free Vulnerability): 15.1 - [CVE-2016-0752](https://www.precursorintelligence.com/what-is/cve-2016-0752) (Ruby on Rails Directory Traversal Vulnerability): 42.1 - [CVE-2020-1938](https://www.precursorintelligence.com/what-is/cve-2020-1938) (Apache Tomcat Improper Privilege Management Vulnerability): 15.1 - [CVE-2015-4902](https://www.precursorintelligence.com/what-is/cve-2015-4902) (Oracle Java SE Integrity Check Vulnerability): 42.1 - [CVE-2020-11652](https://www.precursorintelligence.com/what-is/cve-2020-11652) (SaltStack Salt Path Traversal Vulnerability): 15.1 - [CVE-2016-3718](https://www.precursorintelligence.com/what-is/cve-2016-3718) (ImageMagick Server-Side Request Forgery (SSRF) Vulnerability): 42.1 - [CVE-2020-1472](https://www.precursorintelligence.com/what-is/cve-2020-1472) (Microsoft Netlogon Privilege Escalation Vulnerability): 15.1, 15.2 - [CVE-2020-16009](https://www.precursorintelligence.com/what-is/cve-2020-16009) (Google Chromium V8 Type Confusion Vulnerability): 15.1, 15.2 - [CVE-2020-16846](https://www.precursorintelligence.com/what-is/cve-2020-16846) (SaltStack Salt Shell Injection Vulnerability): 15.1 - [CVE-2019-0211](https://www.precursorintelligence.com/what-is/cve-2019-0211) (Apache HTTP Server Privilege Escalation Vulnerability): 15.0, 42.3 - [CVE-2016-3715](https://www.precursorintelligence.com/what-is/cve-2016-3715) (ImageMagick Arbitrary File Deletion Vulnerability): 42.1 - [CVE-2020-11651](https://www.precursorintelligence.com/what-is/cve-2020-11651) (SaltStack Salt Authentication Bypass Vulnerability): 15.1 ## Which Leap vulnerabilities are being exploited? 18 flaws are on the government list of vulnerabilities known to be exploited, newest first: - [CVE-2025-32463](https://www.precursorintelligence.com/what-is/cve-2025-32463): Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability. Critical, CVSS 9.3, chance of use in 30 days 55%, known exploited since 29 September 2025. - [CVE-2019-5418](https://www.precursorintelligence.com/what-is/cve-2019-5418): Rails Ruby on Rails Path Traversal Vulnerability. High, CVSS 7.5, chance of use in 30 days 99%, known exploited since 7 July 2025. - [CVE-2016-3714](https://www.precursorintelligence.com/what-is/cve-2016-3714): ImageMagick Improper Input Validation Vulnerability. High, CVSS 8.4, chance of use in 30 days 97%, known exploited since 9 September 2024. - [CVE-2020-12641](https://www.precursorintelligence.com/what-is/cve-2020-12641): Roundcube Webmail Remote Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 84%, known exploited since 22 June 2023. - [CVE-2016-3427](https://www.precursorintelligence.com/what-is/cve-2016-3427): Oracle Java SE and JRockit Unspecified Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 92%, known exploited since 12 May 2023. - [CVE-2016-1646](https://www.precursorintelligence.com/what-is/cve-2016-1646): Google Chromium V8 Out-of-Bounds Read Vulnerability. High, CVSS 8.8, chance of use in 30 days 48%, known exploited since 8 June 2022. - [CVE-2019-13720](https://www.precursorintelligence.com/what-is/cve-2019-13720): Google Chrome WebAudio Use-After-Free Vulnerability. High, CVSS 8.8, chance of use in 30 days 49%, known exploited since 23 May 2022. - [CVE-2016-0752](https://www.precursorintelligence.com/what-is/cve-2016-0752): Ruby on Rails Directory Traversal Vulnerability. High, CVSS 7.5, chance of use in 30 days 96%, known exploited since 25 March 2022. - [CVE-2020-1938](https://www.precursorintelligence.com/what-is/cve-2020-1938): Apache Tomcat Improper Privilege Management Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 3 March 2022. - [CVE-2015-4902](https://www.precursorintelligence.com/what-is/cve-2015-4902): Oracle Java SE Integrity Check Vulnerability. Medium, CVSS 5.3, chance of use in 30 days 14%, known exploited since 3 March 2022. - [CVE-2020-11652](https://www.precursorintelligence.com/what-is/cve-2020-11652): SaltStack Salt Path Traversal Vulnerability. Medium, CVSS 6.5, chance of use in 30 days 86%, known exploited since 3 November 2021. - [CVE-2016-3718](https://www.precursorintelligence.com/what-is/cve-2016-3718): ImageMagick Server-Side Request Forgery (SSRF) Vulnerability. Medium, CVSS 5.5, chance of use in 30 days 76%, known exploited since 3 November 2021. - [CVE-2020-1472](https://www.precursorintelligence.com/what-is/cve-2020-1472): Microsoft Netlogon Privilege Escalation Vulnerability. Medium, CVSS 5.5, chance of use in 30 days >99%, known exploited since 3 November 2021. - [CVE-2020-16009](https://www.precursorintelligence.com/what-is/cve-2020-16009): Google Chromium V8 Type Confusion Vulnerability. High, CVSS 8.8, chance of use in 30 days 48%, known exploited since 3 November 2021. - [CVE-2020-16846](https://www.precursorintelligence.com/what-is/cve-2020-16846): SaltStack Salt Shell Injection Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 3 November 2021. - [CVE-2019-0211](https://www.precursorintelligence.com/what-is/cve-2019-0211): Apache HTTP Server Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 65%, known exploited since 3 November 2021. - [CVE-2016-3715](https://www.precursorintelligence.com/what-is/cve-2016-3715): ImageMagick Arbitrary File Deletion Vulnerability. Medium, CVSS 5.5, chance of use in 30 days 75%, known exploited since 3 November 2021. - [CVE-2020-11651](https://www.precursorintelligence.com/what-is/cve-2020-11651): SaltStack Salt Authentication Bypass Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 97%, known exploited since 3 November 2021. ## Which Leap flaws are most likely to be used? Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days): - [CVE-2014-0195](https://www.precursorintelligence.com/what-is/cve-2014-0195): >99%, Medium (CVSS 6.8) - [CVE-2016-3714](https://www.precursorintelligence.com/what-is/cve-2016-3714): 97%, High (CVSS 8.4), known exploited - [CVE-2016-0752](https://www.precursorintelligence.com/what-is/cve-2016-0752): 96%, High (CVSS 7.5), known exploited - [CVE-2017-5753](https://www.precursorintelligence.com/what-is/cve-2017-5753): 94%, Medium (CVSS 5.6) - [CVE-2016-2107](https://www.precursorintelligence.com/what-is/cve-2016-2107): 89%, Medium (CVSS 5.9) - [CVE-2014-0221](https://www.precursorintelligence.com/what-is/cve-2014-0221): 88%, Medium (CVSS 4.3) - [CVE-2019-11358](https://www.precursorintelligence.com/what-is/cve-2019-11358): 87%, Medium (CVSS 6.1) - [CVE-2014-3470](https://www.precursorintelligence.com/what-is/cve-2014-3470): 86%, Medium (CVSS 4.3) - [CVE-2017-14491](https://www.precursorintelligence.com/what-is/cve-2017-14491): 85%, Critical (CVSS 9.8) ## Questions ### How many vulnerabilities does Leap have? We track 1,919 published vulnerabilities listed under the name Leap, across 11 versions. The most recent Leap flaw added to the known-exploited list is CVE-2025-32463, on 29 September 2025. ### Which Leap vulnerabilities are being exploited? 18 are on the list of flaws known to be exploited. The most recently added are CVE-2025-32463, CVE-2019-5418 and CVE-2016-3714. ### Why are newer Leap flaws missing from this page? Opensuse also lists Leap under more specific names, such as Leap Micro. Flaws listed only under those names are counted on their own pages, not here. Open the release you run to see its own list. ### Which versions of Leap do the exploited flaws affect? Each flaw names its own versions, usually as ranges. The newest, CVE-2025-32463, affects 15.6. The versions for every exploited flaw are listed on this page. ### How do I get alerts for Leap? Create a Precursor Intelligence account and track Leap. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook. ## Running Leap? Precursor Intelligence keeps checking for you: - **Tell us what you run.** Pick your software from a list, or let us work it out from your website. - **We match it to every flaw.** Over 400,000 published flaws, checked against your list. - **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it. - **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools. Start free (no card, nothing to install): https://www.precursorintelligence.com/register Book a demo: https://www.precursorintelligence.com/contact