Backports Sle vulnerabilities

3 known vulnerabilities in Backports Sle from openSUSE. 3 are rated high or critical, and 3 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Google Chromium V8 Type Confusion Exploited

  CVE-2020-16009Nov 3, 2020GoogleEPSS 48.3%

  Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

• 9.6 Critical severity

  Google Chrome FreeType Heap Buffer Overflow Exploited

  CVE-2020-15999Nov 3, 2020GoogleEPSS 63.9%

  Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

• 9.8 Critical severity

  Roundcube Webmail Remote Code Execution Exploited

  CVE-2020-12641May 4, 2020RoundcubeEPSS 84.4%

  rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path.