CVE-2026-4897

all versions

A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the `polkit-

5.5MEDIUM

CVE-2021-4115

all versions

There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor exhaustion

5.5MEDIUM

CVE-2021-3560

< 0.119

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the

7.8HIGH

CVE-2021-4034

< 121

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed

7.8HIGH

CVE-2019-6133

all versions

In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not atomic, and therefore

6.7MEDIUM

CVE-2018-19788

all versions

A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INT_MAX to successfully execute any sy

8.8HIGH

CVE-2018-1116

< 0.115

A flaw was found in polkit before version 0.116. The implementation of the polkit_backend_interactive_authority_check_authorizatio

4.4MEDIUM

CVE-2016-2568

all versions

pkexec, when used with --user nonpriv, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which

7.8HIGH

CVE-2015-4625

<= 0.112

Integer overflow in the authentication_agent_new_cookie function in PolicyKit (aka polkit) before 0.113 allows local users to gain

CVE-2015-3256

<= 0.112

PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (memory corruption and polkitd daemon crash) a

CVE-2015-3255

<= 0.112

The polkit_backend_action_pool_init function in polkitbackend/polkitbackendactionpool.c in PolicyKit (aka polkit) before 0.113 mig

CVE-2015-3218

<= 0.112

The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before 0.113

CVE-2013-4288

< 0.112.1

Race condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit restrictions and gain privileges by start