Every CVE Search/ Get API key

CVE-2021-3560

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests...

7.8 HighIn KEVPublic exploitFix available

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

22.2%Down 1.9 points since Feb 17, 2022
90%50%10%1%

What each source reports

NVD Score used 7.8

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Record
CVE-2021-3560
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-863, CWE-754
Updated
2026-11-02
CVE List 7.8

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Record
CVE-2021-3560
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-863
Updated
2026-11-02
EUVDEUVD-2021-26871 7.8

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Record
EUVD-2021-26871
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-7c49-j253-wq5r 7.8

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests...

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Record
GHSA-7c49-j253-wq5r
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-754, CWE-863
Updated
2026-11-02
CISA KEV No score

Red Hat Polkit Incorrect Authorization Vulnerability

Red Hat Polkit contains an incorrect authorization vulnerability through the bypassing of credential checks for D-Bus requests, allowing for privilege escalation.

Record
CVE-2021-3560
Weakness
CWE-863
Updated
2026-11-02
OSVALPINE-CVE-2021-3560 7.8

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Record
ALPINE-CVE-2021-3560
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
Show 19 moreShow less
OSVBELL-CVE-2021-3560 7.8

CVE-2021-3560 does not affect BellSoft software

Record
BELL-CVE-2021-3560
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 7.8

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Record
CVE-2021-3560
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2021-3560 7.8

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Record
DEBIAN-CVE-2021-3560
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2021-1230 7.8

polkit security update

polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes.

Security Fix(es):

A flaw was found in polkit. When a requesting process disconnects from dbus-daemon just before the call to polkit_system_bus_name_get_creds_sync starts, the process cannot get a unique uid and pid of the process and it cannot verify the privileges of the requesting process. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.(CVE-2021-3560)

Record
OESA-2021-1230
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:2236 7.8

Red Hat Security Advisory: polkit security update

Record
RHSA-2021:2236
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:2237 7.8

Red Hat Security Advisory: polkit security update

Record
RHSA-2021:2237
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:2238 7.8

Red Hat Security Advisory: polkit security update

Record
RHSA-2021:2238
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:2522 9.8

Red Hat Security Advisory: Red Hat Virtualization Host security update [ovirt-4.4.6]

Record
RHSA-2021:2522
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:2555 8.8

Red Hat Security Advisory: OpenShift Container Platform 4.7.19 packages and security update

Record
RHSA-2021:2555
CVSS 3.1
8.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2021:2238 7.8

Important: polkit security update

The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privileged processes to communicate with privileged ones.

Security Fix(es):

  • polkit: local privilege escalation using polkit_system_bus_name_get_creds_sync() (CVE-2021-3560)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2021:2238
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2021-3560 7.8

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Record
UBUNTU-CVE-2021-3560
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVMGASA-2021-0244 No score

Updated polkit packages fix a security vulnerability

A flaw was found in polkit. When a requesting process disconnects from dbus-daemon just before the call to polkit_system_bus_name_get_creds_sync starts, the process cannot get a unique uid and pid of the process and it cannot verify the privileges of the requesting process (CVE-2021-3560).

Record
MGASA-2021-0244
Updated
2026-11-02
OSVopenSUSE-SU-2021:0838-1 No score

Security update for polkit

This update for polkit fixes the following issues:

  • CVE-2021-3560: Fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync() (bsc#1186497).

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Record
openSUSE-SU-2021:0838-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:1843-1 No score

Security update for polkit

This update for polkit fixes the following issues:

  • CVE-2021-3560: Fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync() (bsc#1186497).
Record
openSUSE-SU-2021:1843-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11180-1 No score

libpolkit0-0.118-7.2 on GA media

These are all security issues fixed in the libpolkit0-0.118-7.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11180-1
Updated
2026-11-02
OSVSUSE-SU-2021:1842-1 No score

Security update for polkit

This update for polkit fixes the following issues:

  • CVE-2021-3560: Fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync() (bsc#1186497).
Record
SUSE-SU-2021:1842-1
Updated
2026-11-02
OSVSUSE-SU-2021:1843-1 No score

Security update for polkit

This update for polkit fixes the following issues:

  • CVE-2021-3560: Fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync() (bsc#1186497).
Record
SUSE-SU-2021:1843-1
Updated
2026-11-02
OSVSUSE-SU-2021:1844-1 No score

Security update for polkit

This update for polkit fixes the following issues:

  • CVE-2021-3560: Fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync() (bsc#1186497).
Record
SUSE-SU-2021:1844-1
Updated
2026-11-02
OSVUSN-4980-1 No score

policykit-1 vulnerability

Kevin Backhouse discovered that polkit incorrectly handled errors in the polkit_system_bus_name_get_creds_sync function. A local attacker could possibly use this issue to escalate privileges.

Record
USN-4980-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
polkit
Alpine:v3.14
 before 0.119-r0
0.119-r0
polkit
Alpine:v3.15
 before 0.119-r0
0.119-r0
polkit
Alpine:v3.16
 before 0.119-r0
0.119-r0
polkit
Alpine:v3.17
 before 0.119-r0
0.119-r0
polkit
Alpine:v3.18
 before 0.119-r0
0.119-r0
polkit
Alpine:v3.19
 before 0.119-r0
0.119-r0
polkit
Alpine:v3.20
 before 0.119-r0
0.119-r0
polkit
Alpine:v3.21
 before 0.119-r0
0.119-r0
polkit
Alpine:v3.22
 before 0.119-r0
0.119-r0
polkit
Alpine:v3.23
 before 0.119-r0
0.119-r0
Show 96 moreShow less
Affected packages
PackageAffectedFixed
polkit
Alpine:v3.24
 before 0.119-r0
0.119-r0
policykit-1
Debian:12
 before 0.105-31
0.105-31
policykit-1
Debian:13
 before 0.105-31
0.105-31
policykit-1
Debian:14
 before 0.105-31
0.105-31
polkit
Mageia:7
 before 0.116-1.1.mga7
0.116-1.1.mga7
polkit
Mageia:8
 before 0.118-1.1.mga8
0.118-1.1.mga8
polkit
openEuler:20.03-LTS-SP1
 before 0.116-7.oe1
0.116-7.oe1
polkit
Red Hat:rhel_eus:8.1::baseos
 before 0:0.115-9.el8_1.1
0:0.115-9.el8_1.1
polkit-debuginfo
Red Hat:rhel_eus:8.1::baseos
 before 0:0.115-9.el8_1.1
0:0.115-9.el8_1.1
polkit-debugsource
Red Hat:rhel_eus:8.1::baseos
 before 0:0.115-9.el8_1.1
0:0.115-9.el8_1.1
polkit-devel
Red Hat:rhel_eus:8.1::baseos
 before 0:0.115-9.el8_1.1
0:0.115-9.el8_1.1
polkit-docs
Red Hat:rhel_eus:8.1::baseos
 before 0:0.115-9.el8_1.1
0:0.115-9.el8_1.1
polkit-libs
Red Hat:rhel_eus:8.1::baseos
 before 0:0.115-9.el8_1.1
0:0.115-9.el8_1.1
polkit-libs-debuginfo
Red Hat:rhel_eus:8.1::baseos
 before 0:0.115-9.el8_1.1
0:0.115-9.el8_1.1
polkit
Red Hat:rhel_eus:8.2::baseos
 before 0:0.115-11.el8_2.1
0:0.115-11.el8_2.1
polkit-debuginfo
Red Hat:rhel_eus:8.2::baseos
 before 0:0.115-11.el8_2.1
0:0.115-11.el8_2.1
polkit-debugsource
Red Hat:rhel_eus:8.2::baseos
 before 0:0.115-11.el8_2.1
0:0.115-11.el8_2.1
polkit-devel
Red Hat:rhel_eus:8.2::baseos
 before 0:0.115-11.el8_2.1
0:0.115-11.el8_2.1
polkit-docs
Red Hat:rhel_eus:8.2::baseos
 before 0:0.115-11.el8_2.1
0:0.115-11.el8_2.1
polkit-libs
Red Hat:rhel_eus:8.2::baseos
 before 0:0.115-11.el8_2.1
0:0.115-11.el8_2.1
polkit-libs-debuginfo
Red Hat:rhel_eus:8.2::baseos
 before 0:0.115-11.el8_2.1
0:0.115-11.el8_2.1
polkit
Red Hat:enterprise_linux:8::baseos
 before 0:0.115-11.el8_4.1
0:0.115-11.el8_4.1
polkit-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:0.115-11.el8_4.1
0:0.115-11.el8_4.1
polkit-debugsource
Red Hat:enterprise_linux:8::baseos
 before 0:0.115-11.el8_4.1
0:0.115-11.el8_4.1
polkit-devel
Red Hat:enterprise_linux:8::baseos
 before 0:0.115-11.el8_4.1
0:0.115-11.el8_4.1
polkit-docs
Red Hat:enterprise_linux:8::baseos
 before 0:0.115-11.el8_4.1
0:0.115-11.el8_4.1
polkit-libs
Red Hat:enterprise_linux:8::baseos
 before 0:0.115-11.el8_4.1
0:0.115-11.el8_4.1
polkit-libs-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:0.115-11.el8_4.1
0:0.115-11.el8_4.1
redhat-virtualization-host
Red Hat:rhev_hypervisor:4.4::el8
From an advisory covering 4 CVEs
 before 0:4.4.6-20210615.0.el8_4
0:4.4.6-20210615.0.el8_4
redhat-virtualization-host-image-update
Red Hat:rhev_hypervisor:4.4::el8
From an advisory covering 4 CVEs
 before 0:4.4.6-20210615.0.el8_4
0:4.4.6-20210615.0.el8_4
cri-o
Red Hat:openshift:4.7::el7
From an advisory covering 2 CVEs
 before 0:1.20.3-6.rhaos4.7.git0d0f863.el7
0:1.20.3-6.rhaos4.7.git0d0f863.el7
cri-o-debuginfo
Red Hat:openshift:4.7::el7
From an advisory covering 2 CVEs
 before 0:1.20.3-6.rhaos4.7.git0d0f863.el7
0:1.20.3-6.rhaos4.7.git0d0f863.el7
openshift-clients
Red Hat:openshift:4.7::el7
From an advisory covering 2 CVEs
 before 0:4.7.0-202106252127.p0.git.8b4b094.el7
0:4.7.0-202106252127.p0.git.8b4b094.el7
openshift-clients-redistributable
Red Hat:openshift:4.7::el7
From an advisory covering 2 CVEs
 before 0:4.7.0-202106252127.p0.git.8b4b094.el7
0:4.7.0-202106252127.p0.git.8b4b094.el7
cri-o
Red Hat:openshift:4.7::el8
From an advisory covering 2 CVEs
 before 0:1.20.3-6.rhaos4.7.git0d0f863.el8
0:1.20.3-6.rhaos4.7.git0d0f863.el8
cri-o-debuginfo
Red Hat:openshift:4.7::el8
From an advisory covering 2 CVEs
 before 0:1.20.3-6.rhaos4.7.git0d0f863.el8
0:1.20.3-6.rhaos4.7.git0d0f863.el8
cri-o-debugsource
Red Hat:openshift:4.7::el8
From an advisory covering 2 CVEs
 before 0:1.20.3-6.rhaos4.7.git0d0f863.el8
0:1.20.3-6.rhaos4.7.git0d0f863.el8
dhcp
Red Hat:openshift:4.7::el8
From an advisory covering 2 CVEs
 before 12:4.3.6-41.el8_3.1
12:4.3.6-41.el8_3.1
dhcp-client
Red Hat:openshift:4.7::el8
From an advisory covering 2 CVEs
 before 12:4.3.6-41.el8_3.1
12:4.3.6-41.el8_3.1
dhcp-client-debuginfo
Red Hat:openshift:4.7::el8
From an advisory covering 2 CVEs
 before 12:4.3.6-41.el8_3.1
12:4.3.6-41.el8_3.1
dhcp-common
Red Hat:openshift:4.7::el8
From an advisory covering 2 CVEs
 before 12:4.3.6-41.el8_3.1
12:4.3.6-41.el8_3.1
dhcp-debuginfo
Red Hat:openshift:4.7::el8
From an advisory covering 2 CVEs
 before 12:4.3.6-41.el8_3.1
12:4.3.6-41.el8_3.1
dhcp-debugsource
Red Hat:openshift:4.7::el8
From an advisory covering 2 CVEs
 before 12:4.3.6-41.el8_3.1
12:4.3.6-41.el8_3.1
dhcp-libs
Red Hat:openshift:4.7::el8
From an advisory covering 2 CVEs
 before 12:4.3.6-41.el8_3.1
12:4.3.6-41.el8_3.1
dhcp-libs-debuginfo
Red Hat:openshift:4.7::el8
From an advisory covering 2 CVEs
 before 12:4.3.6-41.el8_3.1
12:4.3.6-41.el8_3.1
dhcp-relay-debuginfo
Red Hat:openshift:4.7::el8
From an advisory covering 2 CVEs
 before 12:4.3.6-41.el8_3.1
12:4.3.6-41.el8_3.1
dhcp-server-debuginfo
Red Hat:openshift:4.7::el8
From an advisory covering 2 CVEs
 before 12:4.3.6-41.el8_3.1
12:4.3.6-41.el8_3.1
openshift-clients
Red Hat:openshift:4.7::el8
From an advisory covering 2 CVEs
 before 0:4.7.0-202106252127.p0.git.8b4b094.el8
0:4.7.0-202106252127.p0.git.8b4b094.el8
openshift-clients-redistributable
Red Hat:openshift:4.7::el8
From an advisory covering 2 CVEs
 before 0:4.7.0-202106252127.p0.git.8b4b094.el8
0:4.7.0-202106252127.p0.git.8b4b094.el8
openshift-kuryr
Red Hat:openshift:4.7::el8
From an advisory covering 2 CVEs
 before 0:4.7.0-202106232224.p0.git.c7654fb.el8
0:4.7.0-202106232224.p0.git.c7654fb.el8
openshift-kuryr-cni
Red Hat:openshift:4.7::el8
From an advisory covering 2 CVEs
 before 0:4.7.0-202106232224.p0.git.c7654fb.el8
0:4.7.0-202106232224.p0.git.c7654fb.el8
openshift-kuryr-common
Red Hat:openshift:4.7::el8
From an advisory covering 2 CVEs
 before 0:4.7.0-202106232224.p0.git.c7654fb.el8
0:4.7.0-202106232224.p0.git.c7654fb.el8
openshift-kuryr-controller
Red Hat:openshift:4.7::el8
From an advisory covering 2 CVEs
 before 0:4.7.0-202106232224.p0.git.c7654fb.el8
0:4.7.0-202106232224.p0.git.c7654fb.el8
polkit
Red Hat:openshift:4.7::el8
From an advisory covering 2 CVEs
 before 0:0.115-11.el8_3.2
0:0.115-11.el8_3.2
polkit-debuginfo
Red Hat:openshift:4.7::el8
From an advisory covering 2 CVEs
 before 0:0.115-11.el8_3.2
0:0.115-11.el8_3.2
polkit-debugsource
Red Hat:openshift:4.7::el8
From an advisory covering 2 CVEs
 before 0:0.115-11.el8_3.2
0:0.115-11.el8_3.2
polkit-libs
Red Hat:openshift:4.7::el8
From an advisory covering 2 CVEs
 before 0:0.115-11.el8_3.2
0:0.115-11.el8_3.2
polkit-libs-debuginfo
Red Hat:openshift:4.7::el8
From an advisory covering 2 CVEs
 before 0:0.115-11.el8_3.2
0:0.115-11.el8_3.2
python3-kuryr-kubernetes
Red Hat:openshift:4.7::el8
From an advisory covering 2 CVEs
 before 0:4.7.0-202106232224.p0.git.c7654fb.el8
0:4.7.0-202106232224.p0.git.c7654fb.el8
polkit
Rocky Linux:8
 before 0:0.115-11.el8_4.1
0:0.115-11.el8_4.1
polkit
SUSE:HPE Helion OpenStack 8
 before 0.113-5.21.1
0.113-5.21.1
polkit
SUSE:OpenStack Cloud 8
 before 0.113-5.21.1
0.113-5.21.1
polkit
SUSE:OpenStack Cloud 9
 before 0.113-5.21.1
0.113-5.21.1
polkit
SUSE:OpenStack Cloud Crowbar 8
 before 0.113-5.21.1
0.113-5.21.1
polkit
SUSE:OpenStack Cloud Crowbar 9
 before 0.113-5.21.1
0.113-5.21.1
polkit
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 0.113-5.21.1
0.113-5.21.1
polkit
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 0.113-5.21.1
0.113-5.21.1
polkit
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 0.113-5.21.1
0.113-5.21.1
polkit
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 0.113-5.21.1
0.113-5.21.1
polkit
SUSE:Linux Enterprise Server 12 SP3-LTSS
 before 0.113-5.21.1
0.113-5.21.1
polkit
SUSE:Linux Enterprise Server 12 SP3-BCL
 before 0.113-5.21.1
0.113-5.21.1
polkit
SUSE:Linux Enterprise Server 12 SP4-LTSS
 before 0.113-5.21.1
0.113-5.21.1
polkit
SUSE:Linux Enterprise Server 12 SP5
 before 0.113-5.21.1
0.113-5.21.1
polkit
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 0.113-5.21.1
0.113-5.21.1
polkit
SUSE:Linux Enterprise Workstation Extension 12 SP5
 before 0.113-5.21.1
0.113-5.21.1
polkit
SUSE:Linux Enterprise Module for Basesystem 15 SP2
 before 0.116-3.3.1
0.116-3.3.1
polkit
SUSE:Linux Enterprise Module for Basesystem 15 SP3
 before 0.116-3.3.1
0.116-3.3.1
polkit
SUSE:Linux Enterprise Micro 5.0
 before 0.116-3.3.1
0.116-3.3.1
polkit
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
 before 0.114-3.12.1
0.114-3.12.1
polkit
SUSE:Linux Enterprise High Performance Computing 15-LTSS
 before 0.114-3.12.1
0.114-3.12.1
polkit
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
 before 0.114-3.12.1
0.114-3.12.1
polkit
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 0.114-3.12.1
0.114-3.12.1
polkit
SUSE:Linux Enterprise Server 15-LTSS
 before 0.114-3.12.1
0.114-3.12.1
polkit
SUSE:Linux Enterprise Server 15 SP1-BCL
 before 0.114-3.12.1
0.114-3.12.1
polkit
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 0.114-3.12.1
0.114-3.12.1
polkit
SUSE:Linux Enterprise Server for SAP Applications 15
 before 0.114-3.12.1
0.114-3.12.1
polkit
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 0.114-3.12.1
0.114-3.12.1
polkit
SUSE:Manager Proxy 4.0
 before 0.114-3.12.1
0.114-3.12.1
polkit
SUSE:Manager Retail Branch Server 4.0
 before 0.114-3.12.1
0.114-3.12.1
polkit
SUSE:Manager Server 4.0
 before 0.114-3.12.1
0.114-3.12.1
polkit
SUSE:Enterprise Storage 6
 before 0.114-3.12.1
0.114-3.12.1
policykit-1
Ubuntu:20.04:LTS
 before 0.105-26ubuntu1.1, plus listed versions
0.105-26ubuntu1
0.105-26ubuntu1.1
policykit-1
Ubuntu:22.04:LTS
 before 0.105-31
0.105-31
polkit
openSUSE:Leap 15.2
 before 0.116-lp152.2.3.1
0.116-lp152.2.3.1
polkit
openSUSE:Leap 15.3
 before 0.116-3.3.1
0.116-3.3.1
polkit
openSUSE:Tumbleweed
From an advisory covering 4 CVEs
 before 0.118-7.2
0.118-7.2

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
MetasploitPolkit D-Bus Authentication Bypass2021-06-03
PoC in GitHubaancw/polkit-auto-exploit2021-06-11
PoC in GitHubswapravo/polkadots2021-06-11
PoC in GitHubhakivvi/CVE-2021-35602021-06-12
PoC in GitHubiSTAR-Lab/CVE-2021-3560_PoC2021-06-14
PoC in GitHubsecnigma/CVE-2021-3560-Polkit-Privilege-Esclation2021-06-14
Exploit-DBPolkit 0.105-26 0.117-2 - Local Privilege Escalation2021-06-15
PoC in GitHubcurtishoughton/CVE-2021-35602021-06-15
PoC in GitHubAlmorabea/Polkit-exploit2021-06-19
PoC in GitHubAssassinUKG/Polkit-CVE-2021-35602021-06-29
Show 17 moreShow less
Public exploits
SourceLinkDate
PoC in GitHubcpu0x00/CVE-2021-35602021-07-02
PoC in GitHubBizarreLove/CVE-2021-35602021-07-28
PoC in GitHub0dayNinja/CVE-2021-35602021-07-30
PoC in GitHubadmin-079/CVE-2021-35602021-11-12
PoC in GitHubchenaotian/CVE-2021-35602022-01-31
PoC in GitHubNeonWhiteRabbit/CVE-2021-35602022-02-02
PoC in GitHubf4T1H21/CVE-2021-3560-Polkit-DBus2022-02-13
PoC in GitHubRicterZ/CVE-2021-3560-Authentication-Agent2022-04-29
PoC in GitHubwinmin/CVE-2021-35602022-04-30
PoC in GitHubUNICORDev/exploit-CVE-2021-35602022-05-02
PoC in GitHubasepsaepdin/CVE-2021-35602023-07-10
PoC in GitHubpashayogi/ROOT-CVE-2021-35602023-08-20
PoC in GitHubTieuLong21Prosper/CVE-2021-35602023-10-06
PoC in GitHubLucasPDiniz/CVE-2021-35602023-11-08
PoC in GitHubKyyomaa/CVE-2021-3560-EXPLOIT2024-03-24
PoC in GitHubarcslash/exploit_CVE-2021-35602025-02-18
PoC in GitHubtitusG85/SideWinder-Exploit2025-05-09

Plus 8 more. The full list has every link.

History

History
RecordedChangedSources
affected
exploitation
affected, aliases, referencesOSV
exploits, exploits_more
first indexedCVE List, EUVD, Exploit-DB, GitHub Advisories, CISA KEV, Metasploit, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-3560 is a high vulnerability (CVSS 7.8) in Polkit Project Polkit, published June 3, 2021. CISA lists it as known to be exploited, since May 12, 2023. EUVD reports exploitation since May 12, 2023. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 22.2%, the 97th percentile. Fixed in polkit 0.119-r0.

References

Show 54 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open