https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:53:36 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-03207 bdu:2021-03207 https://cve.radiocsirt.org/vuln/bdu:2021-03207 https://cve.radiocsirt.org/vuln/bell-cve-2021-3560 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2021-3560 https://cve.radiocsirt.org/vuln/certfr-2022-avi-351 certfr-2022-avi-351 https://cve.radiocsirt.org/vuln/certfr-2022-avi-351 https://cve.radiocsirt.org/vuln/euvd-2026-255872 EUVD-2026-255872 https://cve.radiocsirt.org/vuln/euvd-2026-255872 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3560 <p>It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.</p> <p>It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-3560 https://cve.radiocsirt.org/vuln/ghsa-7c49-j253-wq5r <p>It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.</p> <p>It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.</p> https://cve.radiocsirt.org/vuln/ghsa-7c49-j253-wq5r https://cve.radiocsirt.org/vuln/gsd-2021-3560 gsd-2021-3560 https://cve.radiocsirt.org/vuln/gsd-2021-3560 https://cve.radiocsirt.org/vuln/msrc_cve-2021-3560 msrc_CVE-2021-3560 https://cve.radiocsirt.org/vuln/msrc_cve-2021-3560 https://cve.radiocsirt.org/vuln/oesa-2021-1230 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: polkit</p> <p>polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes. Security Fix(es): A flaw was found in polkit. When a requesting process disconnects from dbus-daemon just before the call to polkit_system_bus_name_get_creds_sync starts, the process cannot get a unique uid and pid of the process and it cannot verify the privileges of the requesting process. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.(CVE-2021-3560)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: polkit</p> <p>polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes. Security Fix(es): A flaw was found in polkit. When a requesting process disconnects from dbus-daemon just before the call to polkit_system_bus_name_get_creds_sync starts, the process cannot get a unique uid and pid of the process and it cannot verify the privileges of the requesting process. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.(CVE-2021-3560)</p> https://cve.radiocsirt.org/vuln/oesa-2021-1230 https://cve.radiocsirt.org/vuln/opensuse-su-2021:0838-1 <p>Security update for polkit</p> <p>Security update for polkit</p> https://cve.radiocsirt.org/vuln/opensuse-su-2021:0838-1 https://cve.radiocsirt.org/vuln/rhsa-2021:2236 <p>polkit: local privilege escalation using polkit_system_bus_name_get_creds_sync()</p> <p>polkit: local privilege escalation using polkit_system_bus_name_get_creds_sync()</p> https://cve.radiocsirt.org/vuln/rhsa-2021:2236 https://cve.radiocsirt.org/vuln/suse-su-2021:1842-1 <p>Security update for polkit</p> <p>Security update for polkit</p> https://cve.radiocsirt.org/vuln/suse-su-2021:1842-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3560 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: policykit-1, Ubuntu:22.04:LTS: policykit-1</p> <p>It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: policykit-1, Ubuntu:22.04:LTS: policykit-1</p> <p>It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3560