policykit-1 vulnerabilities (Debian)
17 vulnerabilities.
-
policykit-1Debian Polkit: regression in cve-2026-4897 fix (polkit read_cookie()) - stack buffer underflow 3.5 Low -
policykit-1Debian Polkit: polkit: denial of service via unbounded input processing through standard input 5.5 Medium -
policykit-1Debian Polkit: xml policy file with a large number of nested elements may lead to out-of-bounds write 6.7 Medium -
policykit-1Debian There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to... 5.5 Medium -
policykit-1Debian A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec... 7.8 High -
policykit-1Debian It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests... 7.8 High -
policykit-1Debian In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because... 6.7 Medium -
policykit-1Debian A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than... 8.8 High -
policykit-1Debian A flaw was found in polkit before version 0.116. The implementation of the... 4.7 Medium -
policykit-1Debian pkexec, when used with --user nonpriv, allows local users to escape to the parent session via a... 7.8 High -
policykit-1Debian Integer overflow in the authentication_agent_new_cookie function in PolicyKit (aka polkit) before... 4.6 Medium -
policykit-1Debian The polkit_backend_action_pool_init function in polkitbackend/polkitbackendactionpool.c in... 4.6 Medium -
policykit-1Debian The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in... 2.1 Low -
policykit-1Debian Race condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit... 7.2 High -
policykit-1Debian PolicyKit 0.103 sets the AdminIdentities to "wheel" by default, which allows local users in the... 6.9 Medium -
policykit-1Debian Race condition in the pkexec utility and polkitd daemon in PolicyKit (aka polkit) 0.96 allows... 6.9 Medium -
policykit-1Debian Format string vulnerability in the grant helper (polkit-grant-helper.c) in PolicyKit 0.7 and... 4.6 Medium