Security Resilience

← All vendors

Opensuse

CPE vendor key: opensuse · 10 CVEs published in the last 24 months.

CVEs (365 d)
8
no change vs prior 30d
Avg CVSS (365 d)
7.55
over 8 CVEs
Avg EPSS pct (365 d)
0.40
higher = more likely exploited
KEV hit rate (365 d)
12.5%
1 of 8 added to CISA KEV
LLM-credited CVEs
0
none detected

Monthly CVE volume — last 24 months

20242025202603
Each point is one calendar month. Bars in the severity card to the right slice the same volume by CVSS band.

Severity mix

CritHighMedLow
Stacked by CVSS band (Critical / High / Medium / Low) using the best available metric per CVE.

Top affected products (24 mo)

libsolv
3
leap
2
libzypp
2
mirrorcache
1
tumbleweed
1
munge
1
Distinct CVEs that include each product in their CPE configuration.

Top CWEs (24 mo)

CWE-787
2
CWE-23
2
CWE-79
1
CWE-829
1
CWE-754
1
CWE-120
1
CWE-669
1
CWE-1288
1
CWE-121
1
CWE-122
1
Distinct CVEs assigned each weakness.

Known exploited, all time (59)

PublishedCVE
2026-04-22CVE-2026-31431
2025-06-30CVE-2025-32463
2020-11-06CVE-2020-16846
2020-11-03CVE-2020-15999
2020-11-03CVE-2020-16009
2020-08-17CVE-2020-1472
2020-05-04CVE-2020-12641
2020-04-30CVE-2020-11651
2020-04-30CVE-2020-11652
2020-02-24CVE-2020-1938
2019-11-25CVE-2019-13720
2019-04-08CVE-2019-0211
2019-03-27CVE-2019-5418
2016-06-16CVE-2016-4171
2016-05-11CVE-2016-4117
2016-05-05CVE-2016-3714
2016-05-05CVE-2016-3715
2016-05-05CVE-2016-3718
2016-04-21CVE-2016-3427
2016-03-29CVE-2016-1646
2016-02-16CVE-2016-0752
2015-12-28CVE-2015-8651
2015-10-22CVE-2015-4902
2015-10-15CVE-2015-7645
2015-08-11CVE-2015-3246
2015-08-08CVE-2015-4495
2015-07-16CVE-2015-2590
2015-07-14CVE-2015-5122
2015-07-14CVE-2015-5123
2015-07-08CVE-2015-5119
2015-06-23CVE-2015-3113
2015-04-14CVE-2015-3043
2015-02-02CVE-2015-0313
2014-09-25CVE-2014-7169
2014-09-24CVE-2014-6271
2014-06-07CVE-2014-3153
2014-04-07CVE-2014-0160
2014-02-21CVE-2014-0502
2014-02-05CVE-2014-0497
2013-06-26CVE-2013-1690
2013-05-16CVE-2013-1675
2013-04-17CVE-2013-2423
2013-02-27CVE-2013-0643
2013-02-27CVE-2013-0648
2013-02-14CVE-2013-0640
2013-02-14CVE-2013-0641
2013-01-10CVE-2013-0422
2012-08-15CVE-2012-1535
2012-06-09CVE-2012-2034
2012-05-11CVE-2012-1823
2011-04-13CVE-2011-0611
2011-03-15CVE-2011-0609
2010-12-14CVE-2010-4344
2010-12-14CVE-2010-4345
2010-12-06CVE-2010-3904
2010-06-08CVE-2010-1297
2010-04-01CVE-2010-0840
2010-01-13CVE-2009-3953
2009-12-15CVE-2009-4324
Attributed by CPE rather than by CISA's vendor name, so it includes CVEs filed under another vendor whose affected-product list names this one — shared library code is the usual reason. Broader, and noisier, than the name-matched card above on purpose.

Generated 16 October 2026 12:22 UTC .