polkit project polkit

Name: polkit project polkit
Brand: polkit project

productUS

cpe:2.3:a:polkit_project:polkit:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical4high6medium1low

updated 2026-10-28

vulnerabilities (11)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-4034US	high7.8OT critical	94.9% (100th)	KEV	121	2022-01-28	< 121
CVE-2021-3560US	high7.8OT critical	23.7% (98th)	KEV	0.119	2022-02-16	< 0.119
CVE-2018-19788US	high8.8	11.6% (96th)	Exploit	no fix	2018-12-03	= 0.115
CVE-2015-3256US	medium4.6	0.35% (29th)	Exploit	no fix	2015-10-26	≤ 0.112
CVE-2018-1116US	medium4.4OT elevated	1.20% (68th)	—	0.115	2018-07-10	< 0.115
CVE-2021-4115US	medium5.5	0.53% (44th)	—	no fix	2022-02-21	= 0.117
CVE-2019-6133US	medium6.7	0.45% (39th)	—	no fix	2019-01-11	= 0.115
CVE-2015-3218US	low2.1	0.43% (37th)	—	no fix	2015-10-26	≤ 0.112
CVE-2015-4625US	medium4.6	0.42% (36th)	—	no fix	2015-10-26	≤ 0.112
CVE-2015-3255US	medium4.6	0.38% (32nd)	—	no fix	2015-10-26	≤ 0.112
CVE-2013-4288US	high7.2	0.34% (28th)	—	0.112.1	2013-10-03	< 0.112.1

The flaw types (CWEs) most of these CVEs share.

CWE-264CWE-2642 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')2 CVEs
CWE-125Out-of-bounds Read1 CVEs
CWE-189CWE-1891 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-284Improper Access Control1 CVEs
CWE-285Improper Authorization1 CVEs
CWE-287Improper Authentication1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.