PO
Product
Polkit
On CISA KEVExploited in the wildRansomware-linked
11
CVEs
2
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 3Low 0
Watch
Add Polkit to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-6133 | 6.7 | Jan 11 | In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not atomic, and therefore authorization decisions are improperly cached Affected: 0.115 |
| CVE-2021-4115 | 5.5 | Feb 21 | There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor exhaustion Affected: 0.117 |
| CVE-2018-1116 | 4.4 | Jul 10 | A flaw was found in polkit before version 0.116 Affected: before 0.115 |
Showing 3
