CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2022-01-28
Polkit pkexec Local Privilege Escalation (LPE) Vulnerability Analysis and Mitigation Guide (PwnKit, CVE-2021-4034)
[Affected Scope] Almost all major Linux distributions (RedHat, Debian, Ubuntu, SUSE, etc.) with the Polkit (formerly PolicyKit) pkexec utility installed.
[Impact] A local unprivileged attacker can exploit the vulnerable pkexec binary to bypass authorization policies and gain full root administrative privileges on the target host.
[Mitigation] Apply official vendor security patches immediately, or remove the SUID permission (chmod 0755) from the pkexec binary as a temporary workaround.