Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-4897

Polkit: polkit: denial of service via unbounded input processing through standard input

A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the `polkit-agent-helper-1` setuid binary via standard input (stdin). This unbounded input can lead to an out-of-memory (OOM) condition, resulting in a Denial of Service (DoS) for the system.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Freedesktop Redhat
Products
Polkit Enterprise Linux Hummingbird and 3 more
CVE-2016-2568

polkit: Program run via pkexec as unprivileged user can escape to parent session via TIOCSTI ioctl

pkexec, when used with --user nonpriv, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Freedesktop Redhat
Products
Polkit Enterprise Linux