PatchTheCVEpolkit project vulnerabilities
Recent CVEs affecting polkit project products. 3 tracked.
polkit project has 3 tracked vulnerabilities, 0 critical and 2 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 2. Most recent: 2022-02-21. Highest priority: CVE-2021-4034 (score 92/100).
- CVE-2021-4034 HIGH 7.8 EXPLOITED UPGRADE DOWNGRADE Red Hat Polkit Out-of-Bounds Read and Write Vulnerability
- CVE-2021-4115 MEDIUM 5.5 DOWNGRADE MITIGATE There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file d
- CVE-2021-3560 HIGH 7.8 EXPLOITED UPGRADE MITIGATE Red Hat Polkit Incorrect Authorization Vulnerability
FAQ
How do I fix polkit project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is polkit project being exploited right now?
Yes: 2 polkit project CVEs are on the CISA Known Exploited Vulnerabilities list, so patch those first.
Which polkit project CVE should I patch first?
CVE-2021-4034 currently ranks highest (92/100): Red Hat Polkit Out-of-Bounds Read and Write Vulnerability.