Z-galaxy vulnerabilities
We track 1 vulnerability in Z-galaxy products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 31, 2026.
1vulnerabilities
0critical
1high
0exploited
7.3average CVSS score
Latest Z-galaxy vulnerabilities
- 7.3 High severity
zbus_polkit: Time-of-check Time-of-use (TOCTOU) Race Condition
Subject::new_for_owner() in the zbus_polkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer (D-Bus type u), whereas the org.freedesktop.PolicyKit1.Authority interface specifies a signed 32-bit integer (D-Bus type i).