CyberSecBulletin

Polkit vulnerabilities

We track 2 vulnerabilities in Polkit products. 2 are rated high or critical, and 2 have been exploited in real attacks. The most recent was published on February 16, 2022.

2vulnerabilities
0critical
2high
2exploited
7.8average CVSS score

Latest Polkit vulnerabilities

  • 7.8 High severity

    Red Hat Polkit Incorrect Authorization Exploited

    CVE-2021-3560PolkitEPSS 21.8%

    It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local adminis

  • 7.8 High severity

    Red Hat Polkit Out-of-Bounds Read and Write Exploited

    CVE-2021-4034PolkitEPSS 94.9%

    A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn