17 matches found
CVE-2021-3560-exploit
CVE-2021-3560 — Escalation dei privilegi in Polkit CVE-2021-3560 è una vulnerabilità di escalation dei privilegi locale in Polkit ex PolicyKit, il framework di autorizzazione utilizzato dagli ambienti desktop Linux. Un attaccante locale e non privilegiato può sfruttare una race condition...
ptrace_may_dream
ptracemaydream CVE-2026-46333 Exploit di escalation dei privilegi locale per la condizione di race mm=NULL in ptracemayaccess in pidfdgetfd2. Quando un processo sta morendo e la sua mm è già stata rilasciata, il kernel salta completamente il controllo di accesso ptrace. Mettendo in competizione...
Polkit-CVE-2021-3560
Polkit-CVE-2021-3560 Contesto All'inizio del 2021, un ricercatore di nome Kevin Backhouse ha scoperto una vulnerabilità di escalation dei privilegi vecchia di sette anni poi designata CVE-2021-3560 nell'utilità polkit di Linux. Fortunatamente, diverse distribuzioni di Linux e persino diverse...
EUVD-2026-48570
A flaw was found in accountsservice. The systemd-homed code path for SetIconFile opens a user-supplied filename as root without the validation and privilege drop performed by the classic handler. A local attacker with a systemd-homed-managed account can read arbitrary files accessible to the...
CVE-2026-16743
The CVE-2026-16743 entry concerns accountsservice. The systemd-homed code path for SetIconFile opens a user-supplied filename as root without the validation and privilege drop done by the classic handler. A local attacker with a systemd-homed-managed account can read arbitrary files accessible to...
Exploit for Incorrect Authorization in Polkit_Project Polkit
CVE-2021-3560 — Polkit Privilege Escalation CVE-2021-3560 is...
Exploit for Incorrect Authorization in Polkit_Project Polkit
CVE-2021-3560 — Polkit Privilege Escalation CVE-2021-3560 is...
AZL-43453 CVE-2023-3297 affecting package accountsservice 0.6.55-4
In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process...
CVE-2023-3297
In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process...
Double free
In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process...
CVE-2023-3297
In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process...
CVE-2023-3297
In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process...
SUSE CVE-2023-3297
In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process...
CVE-2023-3297
In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process...
UBUNTU-CVE-2023-3297
In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process...
Denial Of Service (DoS)
gdm3 is vulnerable to denial of service DoS. The vulnerability is in gdm3 LPE due to unresponsive accounts-daemon.this could allow a local user to create a new privileged account...