CVE-2021-3560-exploit

CVE-2021-3560 — تصعيد الامتيازات في Polkit CVE-2021-3560 هي ثغرة تصعيد امتيازات محلية في Polkit سابقًا PolicyKit، وهو إطار التفويض المستخدم في بيئات سطح المكتب لينكس. يمكن لمهاجم محلي غير مميز استغلال حالة سباق race condition في واجهة D-Bus الخاصة بـ accounts-daemon لإنشاء مستخدم مميز، تعيين كلمة...

ptrace_may_dream

ptracemaydream CVE-2026-46333 استغلال تصعيد صلاحيات محلي لثغرة ptracemayaccess mm=NULL حالة السباق في pidfdgetfd2. عندما تكون عملية على وشك الانتهاء وقد تم تحرير mm بالفعل، تتجاوز النواة فحص الوصول ptrace تمامًا. ومن خلال منافسة pidfdgetfd مع خروج العملية، يمكن لمستخدم غير مميّز سرقة واصفات ملفات...

Polkit-CVE-2021-3560

Polkit-CVE-2021-3560 Background In early 2021 a researcher named Kevin Backhouse discovered a seven year old privilege escalation vulnerability since designated CVE-2021-3560 in the Linux polkit utility. Fortunately, different distributions of Linux and even different versions of the same...

EUVD-2026-48570

A flaw was found in accountsservice. The systemd-homed code path for SetIconFile opens a user-supplied filename as root without the validation and privilege drop performed by the classic handler. A local attacker with a systemd-homed-managed account can read arbitrary files accessible to the...

CVE-2026-16743

The CVE-2026-16743 entry concerns accountsservice. The systemd-homed code path for SetIconFile opens a user-supplied filename as root without the validation and privilege drop done by the classic handler. A local attacker with a systemd-homed-managed account can read arbitrary files accessible to...

Exploit for Incorrect Authorization in Polkit_Project Polkit

CVE-2021-3560 — Polkit Privilege Escalation CVE-2021-3560 is...

Exploit for Incorrect Authorization in Polkit_Project Polkit

CVE-2021-3560 — Polkit Privilege Escalation CVE-2021-3560 is...

CVE-2023-3297

In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process...

AZL-43453 CVE-2023-3297 affecting package accountsservice 0.6.55-4

In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process...

Double free

In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process...

CVE-2023-3297

In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process...

CVE-2023-3297

In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process...

CVE-2023-3297: Use After Free

In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process...

SUSE CVE-2023-3297

In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process...

CVE-2023-3297

In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process...

UBUNTU-CVE-2023-3297

In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process...

Denial Of Service (DoS)

gdm3 is vulnerable to denial of service DoS. The vulnerability is in gdm3 LPE due to unresponsive accounts-daemon.this could allow a local user to create a new privileged account...

CVE-2012-2737

AccountsService

PT-2012-4225

Name of the Vulnerable Software and Affected Versions AccountsService versions prior to 0.6.22 Description The issue is related to the user change icon file authorized cb function in /usr/libexec/accounts-daemon, which does not properly check the UID when copying an icon file to the system cache...

CVE-2012-2737: Concurrent Execution using Shared Resource with Improper Synchronization

The userchangeiconfileauthorizedcb function in /usr/libexec/accounts-daemon in AccountsService before 0.6.22 does not properly check the UID when copying an icon file to the system cache directory, which allows local users to read arbitrary files via a race condition...