CVE-2021-4034

Polkit pkexec (setuid) contains a local privilege escalation flaw where pkexec fails to validate the calling parameter count and may treat crafted environment variables as commands, enabling unprivileged users to execute arbitrary code with root privileges. This has been reported across multiple ...

CVE-2021-42027

SINUMERIK Edge is affected: all versions prior to 3.2 do not properly validate the server TLS certificate, enabling an attacker to spoof a trusted entity by intercepting client-server communications. The CVE-2021-42027 entry documents IMPROPER CERTIFICATE VALIDATION (CWE-295) as the root cause. I...