Known vulnerabilities in polkit (Red Hat package)

Vendor: Red Hat Inc.

Software: polkit (Red Hat package)

Software CPE: cpe:2.3:o:red_hat:polkit_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 5

Public exploits: 2

Known exploited (KEV): 2

Highest CVSSv4 Score: 8.7

Vulnerabilities (5)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU61268 - Resource exhaustion CVE-2021-4115	CWE-400	Low	No	No	0.115-13.el8_5.2	13.03.2022	SB2022031301 SB2022031302 SB2022040517 and 13 more
#VU60007 - Improper input validation CVE-2021-4034	CWE-20	Medium	Available	Exploited	0.96-11.el6_10.2, 0.112-12.el7_3.1, 0.112-12.el7_4.2, 0.112-18.el7_6.3, 0.112-22.el7_7.2, 0.112-26.el7_9.1, 0.115-9.el8_1.2, 0.115-11.el8_2.2, 0.115-11.el8_4.2, 0.115-13.el8_5.1	26.01.2022	SB2022012601 SB2022012604 SB2022012605 and 51 more
#VU53837 - Permissions, Privileges, and Access Controls CVE-2021-3560	CWE-264	Low	Available	Exploited	0.115-9.el8_1.1, 0.115-11.el8_2.1, 0.115-11.el8_4.1	07.06.2021	SB2021060707 SB2021060712 SB2021060714 and 18 more
#VU16966 - Permissions, Privileges, and Access Controls CVE-2019-6133	CWE-264	Low	No	No	0.96-7.el6_6.1	11.01.2019	SB2019011409 SB2019030501 SB2019022622 and 8 more
#VU13987 - Improper Authorization CVE-2018-1116	CWE-285	Low	No	No	0.112-26.el7	23.07.2018	SB2018072401 SB2018072018 SB2018081010 and 4 more