[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fbPiei2E0npI-ZElIIESasxKAjzxjT7q5dpG0sMm2pMM":3,"g5a-family:suse\u002Flinux_enterprise_desktop":350,"g5a-ex:suse\u002Flinux_enterprise_desktop@*":351},{"success":4,"data":5},true,{"product":6,"versions":44,"topVulnerabilitiesByEpss":53,"kevVulnerabilities":112,"seoMetadata":328,"meta":347},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":43},"suse","linux_enterprise_desktop",8,465,35,"2025-06-30",[14,18,23,27,30,34,36,40],{"version":15,"cve_count":16,"kev_count":17,"has_kev":4},"10",177,11,{"version":19,"cve_count":20,"kev_count":21,"has_kev":22},"10.0",1,0,false,{"version":24,"cve_count":25,"kev_count":26,"has_kev":4},"11",279,24,{"version":28,"cve_count":29,"kev_count":21,"has_kev":22},"11.0",4,{"version":31,"cve_count":32,"kev_count":33,"has_kev":4},"12",172,17,{"version":35,"cve_count":20,"kev_count":21,"has_kev":22},"12.0",{"version":37,"cve_count":38,"kev_count":39,"has_kev":4},"15",6,2,{"version":41,"cve_count":42,"kev_count":21,"has_kev":22},"9",3,"Linux Enterprise Desktop by Suse is a technology product with 8 tracked versions and 465 known security vulnerabilities including 35 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[45,46,47,48,49,50,51,52],{"version":15,"cve_count":16,"kev_count":17,"has_kev":4},{"version":19,"cve_count":20,"kev_count":21,"has_kev":22},{"version":24,"cve_count":25,"kev_count":26,"has_kev":4},{"version":28,"cve_count":29,"kev_count":21,"has_kev":22},{"version":31,"cve_count":32,"kev_count":33,"has_kev":4},{"version":35,"cve_count":20,"kev_count":21,"has_kev":22},{"version":37,"cve_count":38,"kev_count":39,"has_kev":4},{"version":41,"cve_count":42,"kev_count":21,"has_kev":22},[54,62,67,72,80,85,92,97,102,107],{"cveId":55,"description":56,"publishedDate":57,"cvssScore":58,"cvssVersion":59,"severity":60,"isKev":4,"epssScore":61},"CVE-2014-6271","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka \"ShellShock.\"  NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.","2014-09-24",9.8,"v3.1","Critical",0.99999,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":58,"cvssVersion":59,"severity":60,"isKev":4,"epssScore":66},"CVE-2014-7169","GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.","2014-09-25",0.9994,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":58,"cvssVersion":59,"severity":60,"isKev":4,"epssScore":71},"CVE-2014-0497","Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.","2014-02-05",0.99879,{"cveId":73,"description":74,"publishedDate":75,"cvssScore":76,"cvssVersion":77,"severity":78,"isKev":22,"epssScore":79},"CVE-2015-4000","The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the \"Logjam\" issue.","2015-05-21",3.7,"v3.0","Low",0.9986,{"cveId":81,"description":82,"publishedDate":83,"cvssScore":58,"cvssVersion":59,"severity":60,"isKev":4,"epssScore":84},"CVE-2015-3113","Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in June 2015.","2015-06-23",0.99812,{"cveId":86,"description":87,"publishedDate":88,"cvssScore":89,"cvssVersion":59,"severity":90,"isKev":4,"epssScore":91},"CVE-2011-0611","Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Adobe Reader 9.x before 9.4.4 and 10.x before 10.0.3 on Mac OS X, and Adobe Acrobat 9.x before 9.4.4 and 10.x before 10.0.3 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content; as demonstrated by a Microsoft Office document with an embedded .swf file that has a size inconsistency in a \"group of included constants,\" object type confusion, ActionScript that adds custom functions to prototypes, and Date objects; and as exploited in the wild in April 2011.","2011-04-13",8.8,"High",0.9941,{"cveId":93,"description":94,"publishedDate":95,"cvssScore":58,"cvssVersion":59,"severity":60,"isKev":4,"epssScore":96},"CVE-2015-5119","Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows and OS X and 11.x through 11.2.202.468 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function, as exploited in the wild in July 2015.","2015-07-08",0.99344,{"cveId":98,"description":99,"publishedDate":100,"cvssScore":58,"cvssVersion":59,"severity":60,"isKev":4,"epssScore":101},"CVE-2013-2465","Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"Incorrect image channel verification\" in 2D.","2013-06-18",0.98802,{"cveId":103,"description":104,"publishedDate":105,"cvssScore":58,"cvssVersion":59,"severity":60,"isKev":4,"epssScore":106},"CVE-2012-0507","Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Concurrency.  NOTE: the previous information was obtained from the February 2012 Oracle CPU. Oracle has not commented on claims from a downstream vendor and third party researchers that this issue occurs because the AtomicReferenceArray class implementation does not ensure that the array is of the Object[] type, which allows attackers to cause a denial of service (JVM crash) or bypass Java sandbox restrictions.  NOTE: this issue was originally mapped to CVE-2011-3571, but that identifier was already assigned to a different issue.","2012-06-07",0.98189,{"cveId":108,"description":109,"publishedDate":110,"cvssScore":58,"cvssVersion":59,"severity":60,"isKev":4,"epssScore":111},"CVE-2015-0313","Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015, a different vulnerability than CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322.","2015-02-02",0.95266,[113,122,131,138,141,147,157,165,173,181,188,195,199,206,211,218,220,228,235,238,246,253,260,268,275,278,285,287,293,295,301,307,310,312,322],{"cveId":114,"description":115,"publishedDate":12,"cvssScore":116,"severity":60,"isKev":4,"epssScore":117,"cisaVulnName":118,"cisaDateAdded":119,"cisaShortDescription":120,"cisaRequiredAction":121},"CVE-2025-32463","Sudo before 1.9.17p1 allows local users to obtain root access because \u002Fetc\u002Fnsswitch.conf from a user-controlled directory is used with the --chroot option.",9.3,0.55498,"Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability","2025-09-29","Sudo contains an inclusion of functionality from untrusted control sphere vulnerability. This vulnerability could allow local attacker to leverage sudo’s -R (--chroot) option to run arbitrary commands as root, even if they are not listed in the sudoers file.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":123,"description":124,"publishedDate":125,"cvssScore":89,"severity":90,"isKev":4,"epssScore":126,"cisaVulnName":127,"cisaDateAdded":128,"cisaShortDescription":129,"cisaRequiredAction":130},"CVE-2013-0643","The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, does not properly restrict privileges, which makes it easier for remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.","2013-02-27",0.10533,"Adobe Flash Player Incorrect Default Permissions Vulnerability","2024-09-17","Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows a remote attacker to execute arbitrary code via crafted SWF content. ","The impacted product is end-of-life (EoL) and\u002For end-of-service (EoS). Users should discontinue utilization of the product.",{"cveId":132,"description":133,"publishedDate":134,"cvssScore":89,"severity":90,"isKev":4,"epssScore":135,"cisaVulnName":136,"cisaDateAdded":128,"cisaShortDescription":137,"cisaRequiredAction":130},"CVE-2014-0502","Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2014.","2014-02-21",0.24817,"Adobe Flash Player Double Free Vulnerablity","Adobe Flash Player contains a double free vulnerability that allows a remote attacker to execute arbitrary code.",{"cveId":68,"description":69,"publishedDate":70,"cvssScore":58,"severity":60,"isKev":4,"epssScore":71,"cisaVulnName":139,"cisaDateAdded":128,"cisaShortDescription":140,"cisaRequiredAction":130},"Adobe Flash Player Integer Underflow Vulnerablity","Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code.",{"cveId":142,"description":143,"publishedDate":125,"cvssScore":89,"severity":90,"isKev":4,"epssScore":144,"cisaVulnName":145,"cisaDateAdded":128,"cisaShortDescription":146,"cisaRequiredAction":130},"CVE-2013-0648","Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, allows remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.",0.11094,"Adobe Flash Player Code Execution Vulnerability","Adobe Flash Player contains an unspecified vulnerability in the ExternalInterface ActionScript functionality that allows a remote attacker to execute arbitrary code via crafted SWF content.",{"cveId":148,"description":149,"publishedDate":150,"cvssScore":151,"severity":90,"isKev":4,"epssScore":152,"cisaVulnName":153,"cisaDateAdded":154,"cisaShortDescription":155,"cisaRequiredAction":156},"CVE-2010-3904","The rds_page_copy_user function in net\u002Frds\u002Fpage.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.","2010-12-06",7.8,0.15861,"Linux Kernel Improper Input Validation Vulnerability","2023-05-12","Linux Kernel contains an improper input validation vulnerability in the Reliable Datagram Sockets (RDS) protocol implementation that allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.","The impacted product is end-of-life and should be disconnected if still in use.",{"cveId":158,"description":159,"publishedDate":160,"cvssScore":58,"severity":60,"isKev":4,"epssScore":161,"cisaVulnName":162,"cisaDateAdded":154,"cisaShortDescription":163,"cisaRequiredAction":164},"CVE-2016-3427","Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.","2016-04-21",0.92334,"Oracle Java SE and JRockit Unspecified Vulnerability","Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions (JMX). This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service.","Apply updates per vendor instructions.",{"cveId":166,"description":167,"publishedDate":168,"cvssScore":151,"severity":90,"isKev":4,"epssScore":169,"cisaVulnName":170,"cisaDateAdded":171,"cisaShortDescription":172,"cisaRequiredAction":164},"CVE-2021-4034","A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.","2022-01-28",0.94921,"Red Hat Polkit Out-of-Bounds Read and Write Vulnerability","2022-06-27","The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability that allows for privilege escalation with administrative rights.",{"cveId":174,"description":175,"publishedDate":176,"cvssScore":89,"severity":90,"isKev":4,"epssScore":177,"cisaVulnName":178,"cisaDateAdded":179,"cisaShortDescription":180,"cisaRequiredAction":156},"CVE-2015-8651","Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors.","2015-12-28",0.67698,"Adobe Flash Player Integer Overflow Vulnerability","2022-05-25","Integer overflow in Adobe Flash Player allows attackers to execute code.",{"cveId":182,"description":183,"publishedDate":184,"cvssScore":151,"severity":90,"isKev":4,"epssScore":185,"cisaVulnName":186,"cisaDateAdded":179,"cisaShortDescription":187,"cisaRequiredAction":164},"CVE-2014-3153","The futex_requeue function in kernel\u002Ffutex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification.","2014-06-07",0.37233,"Linux Kernel Privilege Escalation Vulnerability","The futex_requeue function in kernel\u002Ffutex.c in Linux kernel does not ensure that calls have two different futex addresses, which allows local users to gain privileges.",{"cveId":189,"description":190,"publishedDate":191,"cvssScore":89,"severity":90,"isKev":4,"epssScore":192,"cisaVulnName":193,"cisaDateAdded":179,"cisaShortDescription":194,"cisaRequiredAction":164},"CVE-2015-4495","The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain privileges, via vectors involving crafted JavaScript code and a native setter, as exploited in the wild in August 2015.","2015-08-08",0.68558,"Mozilla Firefox Security Feature Bypass Vulnerability","Moxilla Firefox allows remote attackers to bypass the Same Origin Policy to read arbitrary files or gain privileges.",{"cveId":81,"description":82,"publishedDate":83,"cvssScore":58,"severity":60,"isKev":4,"epssScore":84,"cisaVulnName":196,"cisaDateAdded":197,"cisaShortDescription":198,"cisaRequiredAction":156},"Adobe Flash Player Heap-Based Buffer Overflow Vulnerability","2022-04-13","Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code.",{"cveId":200,"description":201,"publishedDate":202,"cvssScore":58,"severity":60,"isKev":4,"epssScore":203,"cisaVulnName":204,"cisaDateAdded":197,"cisaShortDescription":205,"cisaRequiredAction":156},"CVE-2015-5122","Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that leverages improper handling of the opaqueBackground property, as exploited in the wild in July 2015.","2015-07-14",0.93892,"Adobe Flash Player Use-After-Free Vulnerability","Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).",{"cveId":207,"description":208,"publishedDate":202,"cvssScore":58,"severity":60,"isKev":4,"epssScore":209,"cisaVulnName":204,"cisaDateAdded":197,"cisaShortDescription":210,"cisaRequiredAction":156},"CVE-2015-5123","Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function, as exploited in the wild in July 2015.",0.1883,"Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).",{"cveId":212,"description":213,"publishedDate":214,"cvssScore":58,"severity":60,"isKev":4,"epssScore":215,"cisaVulnName":216,"cisaDateAdded":197,"cisaShortDescription":217,"cisaRequiredAction":156},"CVE-2015-0311","Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015.","2015-01-23",0.85589,"Adobe Flash Player Remote Code Execution Vulnerability","Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute code.",{"cveId":108,"description":109,"publishedDate":110,"cvssScore":58,"severity":60,"isKev":4,"epssScore":111,"cisaVulnName":204,"cisaDateAdded":197,"cisaShortDescription":219,"cisaRequiredAction":156},"Use-after-free vulnerability in Adobe Flash Player allows remote attackers to execute code.",{"cveId":221,"description":222,"publishedDate":223,"cvssScore":58,"severity":60,"isKev":4,"epssScore":224,"cisaVulnName":225,"cisaDateAdded":226,"cisaShortDescription":227,"cisaRequiredAction":164},"CVE-2013-2729","Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-2727.","2013-05-16",0.66555,"Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability","2022-03-28","Integer overflow vulnerability in Adobe Reader and Acrobat allows attackers to execute remote code.",{"cveId":229,"description":230,"publishedDate":231,"cvssScore":89,"severity":90,"isKev":4,"epssScore":232,"cisaVulnName":233,"cisaDateAdded":226,"cisaShortDescription":234,"cisaRequiredAction":164},"CVE-2013-1690","Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted web site that triggers an attempt to execute data at an unmapped memory location.","2013-06-26",0.69021,"Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability","Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial-of-service (DoS) or possibly execute malicious code via a crafted web site.",{"cveId":98,"description":99,"publishedDate":100,"cvssScore":58,"severity":60,"isKev":4,"epssScore":101,"cisaVulnName":236,"cisaDateAdded":226,"cisaShortDescription":237,"cisaRequiredAction":164},"Oracle Java SE Unspecified Vulnerability","Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to 2D",{"cveId":239,"description":240,"publishedDate":241,"cvssScore":242,"severity":90,"isKev":4,"epssScore":243,"cisaVulnName":244,"cisaDateAdded":226,"cisaShortDescription":245,"cisaRequiredAction":156},"CVE-2012-2034","Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2037.","2012-06-09",7.5,0.07713,"Adobe Flash Player Memory Corruption Vulnerability","Adobe Flash Player contains a memory corruption vulnerability that allows for remote code execution or denial-of-service (DoS).",{"cveId":247,"description":248,"publishedDate":249,"cvssScore":58,"severity":60,"isKev":4,"epssScore":250,"cisaVulnName":251,"cisaDateAdded":226,"cisaShortDescription":252,"cisaRequiredAction":164},"CVE-2012-5076","Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to JAX-WS.","2012-10-16",0.9125,"Oracle Java SE Sandbox Bypass Vulnerability","The default Java security properties configuration did not restrict access to the com.sun.org.glassfish.external and com.sun.org.glassfish.gmbal packages. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions.",{"cveId":254,"description":255,"publishedDate":256,"cvssScore":58,"severity":60,"isKev":4,"epssScore":257,"cisaVulnName":216,"cisaDateAdded":258,"cisaShortDescription":259,"cisaRequiredAction":156},"CVE-2016-4171","Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.","2016-06-16",0.20055,"2022-03-25","Unspecified vulnerability in Adobe Flash Player allows for remote code execution.",{"cveId":261,"description":262,"publishedDate":263,"cvssScore":151,"severity":90,"isKev":4,"epssScore":264,"cisaVulnName":265,"cisaDateAdded":266,"cisaShortDescription":267,"cisaRequiredAction":164},"CVE-2013-0640","Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, as exploited in the wild in February 2013.","2013-02-14",0.86927,"Adobe Reader and Acrobat Memory Corruption Vulnerability","2022-03-03","An memory corruption vulnerability exists in the acroform.dll in Adobe Reader that allows an attacker to perform remote code execution.",{"cveId":269,"description":270,"publishedDate":271,"cvssScore":151,"severity":90,"isKev":4,"epssScore":272,"cisaVulnName":273,"cisaDateAdded":266,"cisaShortDescription":274,"cisaRequiredAction":156},"CVE-2012-1535","Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted SWF content, as exploited in the wild in August 2012 with SWF content in a Word document.","2012-08-15",0.70384,"Adobe Flash Player Arbitrary Code Execution Vulnerability","Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or cause a denial of service via crafted SWF content.",{"cveId":103,"description":104,"publishedDate":105,"cvssScore":58,"severity":60,"isKev":4,"epssScore":106,"cisaVulnName":276,"cisaDateAdded":266,"cisaShortDescription":277,"cisaRequiredAction":164},"Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","An incorrect type vulnerability exists in the Concurrency component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code.",{"cveId":279,"description":280,"publishedDate":281,"cvssScore":58,"severity":60,"isKev":4,"epssScore":282,"cisaVulnName":283,"cisaDateAdded":266,"cisaShortDescription":284,"cisaRequiredAction":164},"CVE-2015-2590","Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732.","2015-07-16",0.25469,"Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability","An unspecified vulnerability exists within Oracle Java Runtime Environment that allows an attacker to perform remote code execution.",{"cveId":93,"description":94,"publishedDate":95,"cvssScore":58,"severity":60,"isKev":4,"epssScore":96,"cisaVulnName":204,"cisaDateAdded":266,"cisaShortDescription":286,"cisaRequiredAction":156},"A use-after-free vulnerability exists within the ActionScript 3 ByteArray class in Adobe Flash Player that allows an attacker to perform remote code execution.",{"cveId":288,"description":289,"publishedDate":290,"cvssScore":151,"severity":90,"isKev":4,"epssScore":291,"cisaVulnName":273,"cisaDateAdded":266,"cisaShortDescription":292,"cisaRequiredAction":156},"CVE-2015-7645","Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code via a crafted SWF file, as exploited in the wild in October 2015.","2015-10-15",0.65339,"Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file.",{"cveId":86,"description":87,"publishedDate":88,"cvssScore":89,"severity":90,"isKev":4,"epssScore":91,"cisaVulnName":216,"cisaDateAdded":266,"cisaShortDescription":294,"cisaRequiredAction":156},"Adobe Flash Player contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content.",{"cveId":296,"description":297,"publishedDate":298,"cvssScore":58,"severity":60,"isKev":4,"epssScore":299,"cisaVulnName":273,"cisaDateAdded":266,"cisaShortDescription":300,"cisaRequiredAction":156},"CVE-2016-4117","Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.","2016-05-11",0.94354,"An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution.",{"cveId":302,"description":303,"publishedDate":263,"cvssScore":151,"severity":90,"isKev":4,"epssScore":304,"cisaVulnName":305,"cisaDateAdded":266,"cisaShortDescription":306,"cisaRequiredAction":164},"CVE-2013-0641","Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in the wild in February 2013.",0.32346,"Adobe Reader Buffer Overflow Vulnerability","A buffer overflow vulnerability exists in Adobe Reader which allows an attacker to perform remote code execution.",{"cveId":55,"description":56,"publishedDate":57,"cvssScore":58,"severity":60,"isKev":4,"epssScore":61,"cisaVulnName":308,"cisaDateAdded":168,"cisaShortDescription":309,"cisaRequiredAction":164},"GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.",{"cveId":63,"description":64,"publishedDate":65,"cvssScore":58,"severity":60,"isKev":4,"epssScore":66,"cisaVulnName":308,"cisaDateAdded":168,"cisaShortDescription":311,"cisaRequiredAction":164},"GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.",{"cveId":313,"description":314,"publishedDate":315,"cvssScore":316,"severity":317,"isKev":4,"epssScore":318,"cisaVulnName":319,"cisaDateAdded":320,"cisaShortDescription":321,"cisaRequiredAction":164},"CVE-2016-3715","The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.","2016-05-05",5.5,"Medium",0.75307,"ImageMagick Arbitrary File Deletion Vulnerability","2021-11-03","ImageMagick contains an unspecified vulnerability that could allow users to delete files by using ImageMagick's 'ephemeral' pseudo protocol, which deletes files after reading.",{"cveId":323,"description":324,"publishedDate":315,"cvssScore":316,"severity":317,"isKev":4,"epssScore":325,"cisaVulnName":326,"cisaDateAdded":320,"cisaShortDescription":327,"cisaRequiredAction":164},"CVE-2016-3718","The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.",0.7565,"ImageMagick Server-Side Request Forgery (SSRF) Vulnerability","ImageMagick contains an unspecified vulnerability that allows attackers to perform server-side request forgery (SSRF) via a crafted image.",{"title":329,"metaDescription":330,"keywords":331,"structuredData":332},"Linux Enterprise Desktop by Suse - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Linux Enterprise Desktop by Suse covering 8 versions with 465 tracked vulnerabilities including 18 critical and 15 high-severity issues and 35 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Linux Enterprise Desktop vulnerabilities, Linux Enterprise Desktop security, Linux Enterprise Desktop CVE, Suse Linux Enterprise Desktop, Linux Enterprise Desktop threat intelligence, Suse security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Linux Enterprise Desktop KEV, Linux Enterprise Desktop exploited vulnerabilities",{"@context":333,"@type":334,"name":335,"description":330,"url":336,"manufacturer":337,"applicationCategory":341,"softwareVersion":342,"mainEntity":343},"https:\u002F\u002Fschema.org","SoftwareApplication","Linux Enterprise Desktop","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsuse\u002Flinux_enterprise_desktop",{"@type":338,"name":339,"url":340},"Organization","Suse","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsuse","Security Software","8 versions tracked",{"@type":344,"name":345,"description":346,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Linux Enterprise Desktop Security Vulnerabilities","Security vulnerabilities affecting Linux Enterprise Desktop by Suse",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":348,"apiVersion":349},"2026-10-17T10:51:47.266Z","3.0",[],{"rows":352,"total":11,"capped":4,"failed":21},[353,359,365,370,374,378,383,388,393,398,402,406,410,414,418,422,426,430,434,438,442,446,450,454,458,462,466,470,474,478],{"cveId":114,"name":118,"severity":60,"cvss":116,"added":119,"epss":117,"published":354,"ranges":355,"checked":4,"hits":358,"covers":22},"2025-06-30T21:15:30.257",[356,357],"15-sp6","15-sp7",[],{"cveId":123,"name":127,"severity":90,"cvss":89,"added":128,"epss":126,"published":360,"ranges":361,"checked":4,"hits":364,"covers":22},"2013-02-27T00:55:01.017",[362,363],"10-sp4","11-sp2",[],{"cveId":132,"name":136,"severity":90,"cvss":89,"added":128,"epss":135,"published":366,"ranges":367,"checked":4,"hits":369,"covers":22},"2014-02-21T05:07:00.017",[368],"11-sp3",[],{"cveId":68,"name":139,"severity":60,"cvss":58,"added":128,"epss":71,"published":371,"ranges":372,"checked":4,"hits":373,"covers":22},"2014-02-05T05:15:29.897",[363,368],[],{"cveId":142,"name":145,"severity":90,"cvss":89,"added":128,"epss":144,"published":375,"ranges":376,"checked":4,"hits":377,"covers":22},"2013-02-27T00:55:01.16",[362,363],[],{"cveId":148,"name":153,"severity":90,"cvss":151,"added":154,"epss":152,"published":379,"ranges":380,"checked":4,"hits":382,"covers":22},"2010-12-06T20:13:00.513",[381],"11-sp1",[],{"cveId":158,"name":162,"severity":60,"cvss":58,"added":154,"epss":161,"published":384,"ranges":385,"checked":4,"hits":387,"covers":22},"2016-04-21T11:00:21.667",[31,386],"12-sp1",[],{"cveId":166,"name":170,"severity":90,"cvss":151,"added":171,"epss":169,"published":389,"ranges":390,"checked":4,"hits":392,"covers":22},"2022-01-28T20:15:12.193",[391],"15-sp2",[],{"cveId":174,"name":178,"severity":90,"cvss":89,"added":179,"epss":177,"published":394,"ranges":395,"checked":4,"hits":397,"covers":22},"2015-12-28T23:59:19.05",[368,396,31,386],"11-sp4",[],{"cveId":182,"name":186,"severity":90,"cvss":151,"added":179,"epss":185,"published":399,"ranges":400,"checked":4,"hits":401,"covers":22},"2014-06-07T14:55:27.24",[368],[],{"cveId":189,"name":193,"severity":90,"cvss":89,"added":179,"epss":192,"published":403,"ranges":404,"checked":4,"hits":405,"covers":22},"2015-08-08T00:59:04.597",[368,396,31],[],{"cveId":81,"name":196,"severity":60,"cvss":58,"added":197,"epss":84,"published":407,"ranges":408,"checked":4,"hits":409,"covers":22},"2015-06-23T21:59:01.96",[31],[],{"cveId":200,"name":204,"severity":60,"cvss":58,"added":197,"epss":203,"published":411,"ranges":412,"checked":4,"hits":413,"covers":22},"2015-07-14T10:59:00.213",[368,396,31],[],{"cveId":207,"name":204,"severity":60,"cvss":58,"added":197,"epss":209,"published":415,"ranges":416,"checked":4,"hits":417,"covers":22},"2015-07-14T10:59:01.337",[368,396,31],[],{"cveId":212,"name":216,"severity":60,"cvss":58,"added":197,"epss":215,"published":419,"ranges":420,"checked":4,"hits":421,"covers":22},"2015-01-23T21:59:04.897",[368,31],[],{"cveId":108,"name":204,"severity":60,"cvss":58,"added":197,"epss":111,"published":423,"ranges":424,"checked":4,"hits":425,"covers":22},"2015-02-02T19:59:00.053",[368,31],[],{"cveId":221,"name":225,"severity":60,"cvss":58,"added":226,"epss":224,"published":427,"ranges":428,"checked":4,"hits":429,"covers":22},"2013-05-16T11:45:31.263",[362,363],[],{"cveId":229,"name":233,"severity":90,"cvss":89,"added":226,"epss":232,"published":431,"ranges":432,"checked":4,"hits":433,"covers":22},"2013-06-26T03:19:10.793",[362,363,368],[],{"cveId":98,"name":236,"severity":60,"cvss":58,"added":226,"epss":101,"published":435,"ranges":436,"checked":4,"hits":437,"covers":22},"2013-06-18T22:55:02.807",[362],[],{"cveId":239,"name":244,"severity":90,"cvss":242,"added":226,"epss":243,"published":439,"ranges":440,"checked":4,"hits":441,"covers":22},"2012-06-09T00:55:00.987",[362,381,363],[],{"cveId":247,"name":251,"severity":60,"cvss":58,"added":226,"epss":250,"published":443,"ranges":444,"checked":4,"hits":445,"covers":22},"2012-10-16T21:55:02.073",[363],[],{"cveId":254,"name":216,"severity":60,"cvss":58,"added":258,"epss":257,"published":447,"ranges":448,"checked":4,"hits":449,"covers":22},"2016-06-16T14:59:51.017",[31,386],[],{"cveId":261,"name":265,"severity":90,"cvss":151,"added":266,"epss":264,"published":451,"ranges":452,"checked":4,"hits":453,"covers":22},"2013-02-14T01:55:02.023",[362,363],[],{"cveId":269,"name":273,"severity":90,"cvss":151,"added":266,"epss":272,"published":455,"ranges":456,"checked":4,"hits":457,"covers":22},"2012-08-15T10:31:40.677",[362],[],{"cveId":103,"name":276,"severity":60,"cvss":58,"added":266,"epss":106,"published":459,"ranges":460,"checked":4,"hits":461,"covers":22},"2012-06-07T22:55:17.883",[362],[],{"cveId":279,"name":283,"severity":60,"cvss":58,"added":266,"epss":282,"published":463,"ranges":464,"checked":4,"hits":465,"covers":22},"2015-07-16T10:59:17.05",[368,396,31],[],{"cveId":93,"name":204,"severity":60,"cvss":58,"added":266,"epss":96,"published":467,"ranges":468,"checked":4,"hits":469,"covers":22},"2015-07-08T14:59:05.677",[368,396,31],[],{"cveId":288,"name":273,"severity":90,"cvss":151,"added":266,"epss":291,"published":471,"ranges":472,"checked":4,"hits":473,"covers":22},"2015-10-15T10:59:10.53",[368,396,31],[],{"cveId":86,"name":216,"severity":90,"cvss":89,"added":266,"epss":91,"published":475,"ranges":476,"checked":4,"hits":477,"covers":22},"2011-04-13T14:55:01.217",[362,381],[],{"cveId":296,"name":273,"severity":60,"cvss":58,"added":266,"epss":299,"published":479,"ranges":480,"checked":4,"hits":481,"covers":22},"2016-05-11T01:59:46.137",[31,386],[]]