https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:10:49.111909+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-06916 bdu:2015-06916 2026-10-02T17:10:49.399131+00:00 bdu:2015-06916 https://cve.radiocsirt.org/vuln/euvd-2026-107407 EUVD-2026-107407 2026-10-02T17:10:49.399167+00:00 EUVD-2026-107407 https://cve.radiocsirt.org/vuln/fkie_cve-2013-4324 fkie_cve-2013-4324 2026-10-02T17:10:49.399182+00:00

spice-gtk 0.14, and possibly other versions, invokes the polkit authority using the insecure polkit_unix_process_new API function, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.

 https://cve.radiocsirt.org/vuln/ghsa-4qg9-qqgj-hw85 GHSA-4qg9-qqgj-hw85 2026-10-02T17:10:49.399224+00:00

spice-gtk 0.14, and possibly other versions, invokes the polkit authority using the insecure polkit_unix_process_new API function, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.

 https://cve.radiocsirt.org/vuln/gsd-2013-4324 gsd-2013-4324 2026-10-02T17:10:49.399243+00:00 gsd-2013-4324 https://cve.radiocsirt.org/vuln/rhsa-2013:1273 RHSA-2013:1273 — Red Hat Security Advisory: spice-gtk security update 2026-10-02T17:10:49.399255+00:00

spice-gtk: Insecure calling of polkit via polkit_unix_process_new()