https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 30 Oct 2026 06:58:08 +0000 https://db.gcve.eu/vuln/certfr-2026-avi-1385 certfr-2026-avi-1385 https://db.gcve.eu/vuln/certfr-2026-avi-1385 https://db.gcve.eu/vuln/ghsa-cvc4-pw4g-cgpc <p>A flaw was found in polkit. When processing input that begins with a null byte, an arithmetic error in the authentication agent helper causes an integer underflow during buffer length calculation, resulting in an out-of-bounds memory read. An attacker capable of supplying crafted input can trigger this flaw, potentially causing an application crash and resulting in a Denial of Service (DoS).</p> <p>A flaw was found in polkit. When processing input that begins with a null byte, an arithmetic error in the authentication agent helper causes an integer underflow during buffer length calculation, resulting in an out-of-bounds memory read. An attacker capable of supplying crafted input can trigger this flaw, potentially causing an application crash and resulting in a Denial of Service (DoS).</p> https://db.gcve.eu/vuln/ghsa-cvc4-pw4g-cgpc https://db.gcve.eu/vuln/oesa-2026-4000 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: polkit</p> <p>polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes. Security Fix(es):</p> <p>A vulnerability, which was classified as very critical, was found in Polkit. The issue is a stack-based buffer overflow in the read_cookie function, which may impact confidentiality, integrity, and availability.(CVE-2026-85498)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: polkit</p> <p>polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes. Security Fix(es):</p> <p>A vulnerability, which was classified as very critical, was found in Polkit. The issue is a stack-based buffer overflow in the read_cookie function, which may impact confidentiality, integrity, and availability.(CVE-2026-85498)</p> https://db.gcve.eu/vuln/oesa-2026-4000 https://db.gcve.eu/vuln/opensuse-su-2026:12203-1 <p>libpolkit-agent-1-0-128-1.1 on GA media</p> <p>libpolkit-agent-1-0-128-1.1 on GA media</p> https://db.gcve.eu/vuln/opensuse-su-2026:12203-1 https://db.gcve.eu/vuln/rhsa-2026:66287 <p>polkit: Polkit: Denial of Service via unbounded input processing through standard input polkit: Regression in CVE-2026-4897 fix (polkit read_cookie()) - stack buffer underflow</p> <p>polkit: Polkit: Denial of Service via unbounded input processing through standard input polkit: Regression in CVE-2026-4897 fix (polkit read_cookie()) - stack buffer underflow</p> https://db.gcve.eu/vuln/rhsa-2026:66287 https://db.gcve.eu/vuln/ubuntu-cve-2026-85498 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: policykit-1, Ubuntu:Pro:16.04:LTS: policykit-1, Ubuntu:18.04:LTS: policykit-1, Ubuntu:20.04:LTS: policykit-1, Ubuntu:22.04:LTS: policykit-1, Ubuntu:24.04:LTS: policykit-1, Ubuntu:26.04:LTS: policykit-1</p> <p>[Regression in CVE-2026-4897 fix (polkit read_cookie()) - stack buffer underflow]</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: policykit-1, Ubuntu:Pro:16.04:LTS: policykit-1, Ubuntu:18.04:LTS: policykit-1, Ubuntu:20.04:LTS: policykit-1, Ubuntu:22.04:LTS: policykit-1, Ubuntu:24.04:LTS: policykit-1, Ubuntu:26.04:LTS: policykit-1</p> <p>[Regression in CVE-2026-4897 fix (polkit read_cookie()) - stack buffer underflow]</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-85498