CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Polkit Local Privilege Escalation Vulnerability (CVE-2021-3560) Analysis & Mitigation Guide
[Affected Scope] Major Linux distributions running polkit versions 0.113 through 0.118
[Impact] Unprivileged local attackers can bypass D-Bus credential checks to escalate privileges to root and create unauthorized administrator accounts
[Mitigation] Immediately update the polkit package to the patched version using the system package manager
Polkit pkexec Local Privilege Escalation (LPE) Vulnerability Analysis and Mitigation Guide (PwnKit, CVE-2021-4034)
[Affected Scope] Almost all major Linux distributions (RedHat, Debian, Ubuntu, SUSE, etc.) with the Polkit (formerly PolicyKit) pkexec utility installed.
[Impact] A local unprivileged attacker can exploit the vulnerable pkexec binary to bypass authorization policies and gain full root administrative privileges on the target host.
[Mitigation] Apply official vendor security patches immediately, or remove the SUID permission (chmod 0755) from the pkexec binary as a temporary workaround.