1919 matches found
OESA-2026-4002 polkit security update
polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes. Security Fixes: A vulnerability, which was classified as very critical, was found in Polkit. The issue is a stack-based buffer overflow in the readcookie...
OESA-2026-4001 polkit security update
polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes. Security Fixes: A vulnerability, which was classified as very critical, was found in Polkit. The issue is a stack-based buffer overflow in the readcookie...
OESA-2026-4000 polkit security update
polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes. Security Fixes: A vulnerability, which was classified as very critical, was found in Polkit. The issue is a stack-based buffer overflow in the readcookie...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: UnionTech-rpm-installer (UTSA-2026-110878)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-110878 advisory. RPMroot shellshell=TruePolkitallowactive=authselfkeep root Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Not...
EulerOS Virtualization 2.11.0 : polkit (EulerOS-SA-2026-3539)
According to the versions of the polkit packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in polkit. When processing an XML policy with 32 or more nested elements in depth, an out-of-bounds write can be...
EulerOS Virtualization 2.11.1 : polkit (EulerOS-SA-2026-3452)
According to the versions of the polkit packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in polkit. When processing an XML policy with 32 or more nested elements in depth, an out-of-bounds write can be...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: UnionTech-rpm-installer (UTSA-2026-109806)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109806 advisory. RPMroot shellshell=TruePolkitallowactive=authselfkeep root Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Not...
Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / Pro Realtime 22.04 LTS / Pro Realtime 24.04 LTS : polkit vulnerability (USN-8762-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / Pro Realtime 22.04 LTS / Pro Realtime 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8762-1 advisory. It was discovered that polkit incorrectly handled cookie input. A local attacker could...
USN-8762-1: polkit vulnerability
It was discovered that polkit incorrectly handled cookie input. A local attacker could possibly use this issue to cause polkit to crash, resulting in a denial of service, or execute arbitrary code...
CVE-2026-19816
A flaw was found in PackageKit. PackageKit skips the polkit authorization check for transactions carrying the SIMULATE dry-run flag. In the dnf5 backend, the RepoRemove handler ignores that contract and always executes the real transaction because its guard is written as role == REPOREMOVE ||...
UBUNTU-CVE-2026-19816
A flaw was found in PackageKit. PackageKit skips the polkit authorization check for transactions carrying the SIMULATE dry-run flag. In the dnf5 backend, the RepoRemove handler ignores that contract and always executes the real transaction because its guard is written as role == REPOREMOVE ||...
CVE-2026-19816 PackageKit: dnf5 backend ignores SIMULATE on RepoRemove
A flaw was found in PackageKit. PackageKit skips the polkit authorization check for transactions carrying the SIMULATE dry-run flag. In the dnf5 backend, the RepoRemove handler ignores that contract and always executes the real transaction because its guard is written as role == REPOREMOVE ||...
Exploit for Out-of-bounds Write in Polkit_Project Polkit
Pwnkit - CVE-2021-4034 Local Privilege Escalation Tested O...
Astra Linux – Vulnerability in Policykit-1
A vulnerability related to local privilege escalation was discovered in the polkit’s pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to execute commands as privileged users according to predefined policies. The current version of pkexec does not proper...
PT-2026-91454
Name of the Vulnerable Software and Affected Versions PackageKit affected versions not specified Description An authorization flaw exists in PackageKit when using the dnf5 backend. The system skips the polkit authorization check for transactions that include the SIMULATE dry-run flag. However, th...
SUSE CVE-2026-19816
A flaw was found in PackageKit. PackageKit skips the polkit authorization check for transactions carrying the SIMULATE dry-run flag. In the dnf5 backend, the RepoRemove handler ignores that contract and always executes the real transaction because its guard is written as role == REPOREMOVE ||...
polkit: Polkit: Denial of Service via unbounded input processing through standard input
A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the polkit-agent-helper-1 setuid binary via standard input stdin. This unbounded input can lead to an out-of-memory OOM condition, resulting in a Denial of Service DoS for the...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: polkit: polkit-127-5.1.hum1 aarch64, x8664 polkit-devel-127-5.1.hum1 aarch64, x8664 polkit-docs-127-5.1.hum1 noarch polkit-libs-127-5.1.hum1 aarch64, x8664 polkit-127-5.1.hum1.src src Security...