CVE-2021-4034

Red Hat Polkit Out-of-Bounds Read and Write Vulnerability

7.8
CVSS 3.1
94.3 %
EPSS (current)
2022-06-27
KEV addition
Yes
Ransomware

Timeline

Publication, first public exploit and KEV addition on a day axis.

Key facts

Vendor / product: Red Hat / Polkit

Published: 2022-01-28 · Due (CISA): 2022-07-18

CWE: CWE-125 · EU list: no

Exploit references (metadata only)

SourceReferenceTitleDate
metasploitexploit/linux/local/cve_2021_4034_pwnkit_lpe_pkexecexploit/linux/local/cve_2021_4034_pwnkit_lpe_pkexec2022-01-25
exploitdb50689PolicyKit-1 0.105-31 - Privilege Escalation2022-01-27

References only — no downloads or instructions.

Sources