$ cve CVE-2021-3560 JSON

CVE-2021-3560 KEV EXPLOIT

7.8

HIGH · CVSS 3.1 · EPSS 23.7% (pctl 98)

Patch first

On CISA KEV — known exploited in the wild, due 2023-06-02.

Description

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Scoring

CVSS	7.8 (HIGH, v3.1)
Vector	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS	23.71% — more likely to be exploited than 98% of all CVEs
Weakness	CWE-863
On CISA KEV	yes — remediate by 2023-06-02
Public exploit	yes
Published	2022-02-16
Last modified	2026-06-17

CISA KEV

Name	Red Hat Polkit Incorrect Authorization Vulnerability
Added	2023-05-12
Due	2023-06-02
Vendor / product	Red Hat / Polkit
Ransomware use	none reported

Affected (7)

Vendor	Product
canonical	ubuntu linux
debian	debian linux
polkit project	polkit
redhat	enterprise linux
redhat	openshift container platform
redhat	virtualization
redhat	virtualization host

Public exploits

Source	Title	Date
exploit-db	Polkit 0.105-26 0.117-2 - Local Privilege Escalation	2021-06-15

References

→ the Explorer · watch your stack · NVD