{"id":"CVE-2021-20315","aliases":["EUVD-2021-7740","GHSA-hpr5-wwh9-pjhf","UBUNTU-CVE-2021-20315"],"status":"published","title":"A locking protection bypass flaw was found in some versions of gnome-shell as shipped within...","description":"A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the \"Application menu\" or \"Window list\" GNOME extensions are enabled. This flaw allows a physical attacker who has access to a locked system to kill existing applications and start new ones as the locked user, even if the session is still locked.","severity":{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00204,"percentile":0.1044,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-667"],"published":"2022-02-18T00:00:00Z","modified":"2026-10-24T10:30:25Z","products":[{"vendor":"centos","product":"stream"},{"vendor":"gnome","product":"gnome-shell"},{"vendor":"the gnome project","product":"gnome-shell"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2006285","tags":["x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20315"},{"url":"https://github.com/advisories/GHSA-hpr5-wwh9-pjhf"},{"url":"https://ubuntu.com/security/CVE-2021-20315","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-20315","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2021-20315","description":"A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the \"Application menu\" or \"Window list\" GNOME extensions are enabled. This flaw allows a physical attacker who has access to a locked system to kill existing applications and start new ones as the locked user, even if the session is still locked.","status":"published","published":"2022-02-18T00:00:00Z","modified":"2024-08-03T17:37:23.718Z","cwes":["CWE-667"],"updated_at":"2026-11-02T14:32:55.564736Z"}],"euvd":[{"id":"EUVD-2021-7740","description":"A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the \"Application menu\" or \"Window list\" GNOME extensions are enabled. This flaw allows a physical attacker who has access to a locked system to kill existing applications and start new ones as the locked user, even if the session is still locked.","status":"published","published":"2022-02-18T00:00:00Z","modified":"2024-08-03T17:37:23Z","updated_at":"2026-11-03T03:25:08.888273Z"}],"ghsa":[{"id":"GHSA-hpr5-wwh9-pjhf","title":"A locking protection bypass flaw was found in some versions of gnome-shell as shipped within...","description":"A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the \"Application menu\" or \"Window list\" GNOME extensions are enabled. This flaw allows a physical attacker who has access to a locked system to kill existing applications and start new ones as the locked user, even if the session is still locked.","status":"published","published":"2022-02-19T00:01:33Z","modified":"2023-01-28T05:04:59Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"medium"}],"cwes":["CWE-667"],"updated_at":"2026-11-02T14:44:17.062669Z"}],"nvd":[{"id":"CVE-2021-20315","description":"A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the \"Application menu\" or \"Window list\" GNOME extensions are enabled. This flaw allows a physical attacker who has access to a locked system to kill existing applications and start new ones as the locked user, even if the session is still locked.","status":"published","published":"2022-02-18T18:15:08.8Z","modified":"2026-06-17T03:33:39.52Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":3.6,"vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","level":"low","assessor":"primary"}],"cwes":["CWE-667"],"updated_at":"2026-11-02T14:07:04.6896Z"}],"osv":[{"id":"CVE-2021-20315","description":"A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the \"Application menu\" or \"Window list\" GNOME extensions are enabled. This flaw allows a physical attacker who has access to a locked system to kill existing applications and start new ones as the locked user, even if the session is still locked.","status":"published","published":"2022-02-18T18:15:08.8Z","modified":"2026-10-24T10:30:25.660755313Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:18.004149Z"},{"id":"UBUNTU-CVE-2021-20315","description":"A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the \"Application menu\" or \"Window list\" GNOME extensions are enabled. This flaw allows a physical attacker who has access to a locked system to kill existing applications and start new ones as the locked user, even if the session is still locked.","status":"withdrawn","published":"2022-02-18T18:15:00Z","modified":"2025-08-01T04:53:00Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:26.29421Z"}]}}