Lucene search
+L

16 matches found

SUSE CVE
SUSE CVE
•added 2026/09/01 12:51 a.m.•23 views

SUSE CVE-2026-78422

Subject::newforowner in the zbuspolkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer D-Bus type u, whereas the org.freedesktop.PolicyKit1.Authority interface specifies a signed 32-bit integer D-Bus type i. Because of this type mismatch, polkit silently...

7.3CVSS5.6AI score0.00125EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/08/31 7:39 p.m.•21 views

CVE-2026-78422

A flaw was found in zbuspolkit. The Subject::newforowner function incorrectly encodes the user ID UID as an unsigned 32-bit integer instead of a signed 32-bit integer when communicating with the PolicyKit polkit authorization framework. This type mismatch causes polkit to disregard the provided U...

7.3CVSS5.5AI score0.00125EPSS
SaveExploits0References5
NVD
NVD
•added 2026/08/31 3:17 p.m.•22 views

CVE-2026-78422

Subject::newforowner in the zbuspolkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer D-Bus type u, whereas the org.freedesktop.PolicyKit1.Authority interface specifies a signed 32-bit integer D-Bus type i. Because of this type mismatch, polkit silently...

7.3CVSS0.00125EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/08/31 3:17 p.m.•29 views

CVE-2026-78422

Subject::newforowner in the zbuspolkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer D-Bus type u, whereas the org.freedesktop.PolicyKit1.Authority interface specifies a signed 32-bit integer D-Bus type i. Because of this type mismatch, polkit silently...

7.3CVSS5.7AI score0.00125EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2026/08/31 3:17 p.m.•9 views

UBUNTU-CVE-2026-78422

Subject::newforowner in the zbuspolkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer D-Bus type u, whereas the org.freedesktop.PolicyKit1.Authority interface specifies a signed 32-bit integer D-Bus type i. Because of this type mismatch, polkit silently...

7.3CVSS5.6AI score0.00125EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/08/31 2:14 p.m.•19 views

CVE-2026-78422 zbus_polkit: polkit authorization bypass via PID reuse due to incorrect D-Bus type for the subject UID

Subject::newforowner in the zbuspolkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer D-Bus type u, whereas the org.freedesktop.PolicyKit1.Authority interface specifies a signed 32-bit integer D-Bus type i. Because of this type mismatch, polkit silently...

7.3CVSS5.6AI score0.00125EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/31 2:14 p.m.•44 views

CVE-2026-78422 zbus_polkit: polkit authorization bypass via PID reuse due to incorrect D-Bus type for the subject UID

Subject::newforowner in the zbuspolkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer D-Bus type u, whereas the org.freedesktop.PolicyKit1.Authority interface specifies a signed 32-bit integer D-Bus type i. Because of this type mismatch, polkit silently...

7.3CVSS0.00125EPSS
SaveExploits0References2
Mend
Mend
•added 2026/08/31 2:14 p.m.•11 views

CVE-2026-78422

Subject::newforowner in the zbuspolkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer D-Bus type u, whereas the org.freedesktop.PolicyKit1.Authority interface specifies a signed 32-bit integer D-Bus type i. Because of this type mismatch, polkit silently...

7.8CVSS5.6AI score0.00125EPSS
SaveExploits0References7
CVE
CVE
•added 2026/08/31 2:14 p.m.•41 views

CVE-2026-78422

CVE-2026-78422 affects the zbus_polkit Rust crate (before 5.1.0 ). The function Subject::new_for_owner() encodes the UID of a unix-process polkit subject as an unsigned 32-bit integer (D-Bus type u), while the org.freedesktop.PolicyKit1.Authority interface expects a signed 32-bit integer (type i)...

7.3CVSS5.6AI score0.00125EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/31 2:14 p.m.•23 views

EUVD-2026-68593

Subject::newforowner in the zbuspolkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer D-Bus type u, whereas the org.freedesktop.PolicyKit1.Authority interface specifies a signed 32-bit integer D-Bus type i. Because of this type mismatch, polkit silently...

7.3CVSS5.6AI score0.00125EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/08/31 2:14 p.m.•25 views

CVE-2026-78422

Subject::newforowner in the zbuspolkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer D-Bus type u, whereas the org.freedesktop.PolicyKit1.Authority interface specifies a signed 32-bit integer D-Bus type i. Because of this type mismatch, polkit silently...

7.3CVSS5.6AI score0.00125EPSS
SaveExploits0
osv_cve
osv_cve
•added 2026/08/31 2:14 p.m.•62 views

CVE-2026-78422 zbus_polkit: polkit authorization bypass via PID reuse due to incorrect D-Bus type for the subject UID

Subject::newforowner in the zbuspolkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer D-Bus type u, whereas the org.freedesktop.PolicyKit1.Authority interface specifies a signed 32-bit integer D-Bus type i. Because of this type mismatch, polkit silently...

7.3CVSS5.6AI score
SaveExploits0References5
RustSec
RustSec
•added 2026/08/31 12:00 p.m.•27 views

`zbus_polkit`: authorization bypass via PID reuse

Subject::newforowner in the zbuspolkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer D-Bus type u, whereas the org.freedesktop.PolicyKit1.Authority interface specifies a signed 32-bit integer D-Bus type i. Because of this type mismatch, polkit silently...

7.3CVSS5.6AI score0.00125EPSS
SaveExploits0Affected Software1
osv_rustsec
osv_rustsec
•added 2026/08/31 12:00 p.m.•40 views

RUSTSEC-2026-0278 `zbus_polkit`: authorization bypass via PID reuse

Subject::newforowner in the zbuspolkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer D-Bus type u, whereas the org.freedesktop.PolicyKit1.Authority interface specifies a signed 32-bit integer D-Bus type i. Because of this type mismatch, polkit silently...

7.3CVSS5.6AI score0.00125EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/31 12:00 a.m.•5 views

CVE-2026-78422: Function Call With Incorrect Argument Type

Subject::newforowner in the zbuspolkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer D-Bus type u, whereas the org.freedesktop.PolicyKit1.Authority interface specifies a signed 32-bit integer D-Bus type i. Because of this type mismatch, polkit silently...

7.3CVSS5.6AI score0.00125EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/08/31 12:00 a.m.•20 views

Linux Distros Unpatched Vulnerability : CVE-2026-78422

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Subject::newforowner in the zbuspolkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer D-Bus type u, whereas the...

7.3CVSS5.7AI score0.00125EPSS
SaveExploits0References2
Rows per page
Query Builder