PULSE
ES
FEED
ransomaurora reclama a Adams Warehouse & Delivery, Inc. · US · Transportationransomthegentlemen reclama a Suhai Segurana Pessoal · BR · Professional Servicesransomthegentlemen reclama a SBI Audiovisual Medinbox · ES · Healthcareransomthegentlemen reclama a Saga University · JP · Educationransomthegentlemen reclama a Netcore Unbxd · IN · Technologyransomthegentlemen reclama a REGiO Nord · DE · Otherransomthegentlemen reclama a Museum Siam · TH · Hospitalityransomthegentlemen reclama a Skin Center · US · Healthcareransomthegentlemen reclama a Thai Ha PCL KASET · TH · Agriculture and Food Productionransomthegentlemen reclama a Inovar Packaging Group · AU · Manufacturingransomthegentlemen reclama a Engineers Ireland · IE · Professional Servicesransomthegentlemen reclama a North Bridge Venture Partners · US · Financial Servicesransomthegentlemen reclama a SONGWOOI · KR · Not Foundransomthegentlemen reclama a Petroleum Telcom Communications · PK · Energy & Utilitiesransomaurora reclama a Adams Warehouse & Delivery, Inc. · US · Transportationransomthegentlemen reclama a Suhai Segurana Pessoal · BR · Professional Servicesransomthegentlemen reclama a SBI Audiovisual Medinbox · ES · Healthcareransomthegentlemen reclama a Saga University · JP · Educationransomthegentlemen reclama a Netcore Unbxd · IN · Technologyransomthegentlemen reclama a REGiO Nord · DE · Otherransomthegentlemen reclama a Museum Siam · TH · Hospitalityransomthegentlemen reclama a Skin Center · US · Healthcareransomthegentlemen reclama a Thai Ha PCL KASET · TH · Agriculture and Food Productionransomthegentlemen reclama a Inovar Packaging Group · AU · Manufacturingransomthegentlemen reclama a Engineers Ireland · IE · Professional Servicesransomthegentlemen reclama a North Bridge Venture Partners · US · Financial Servicesransomthegentlemen reclama a SONGWOOI · KR · Not Foundransomthegentlemen reclama a Petroleum Telcom Communications · PK · Energy & Utilities
← All CVEs
CVE Watch—

CVE-2021-3560

Red Hat Polkit Incorrect Authorization Vulnerability

CVSS

—

No CVSS

EPSS

23.7%

p98

KEV

YES

May 12, 2023

Exploit Today

79

0-100

Published: — · Last modified: —

EPSS · 30d
23.7%EPSS · 30 days23.7%
2026-09-172026-10-15
KEV catalog record

Product

Red Hat / Polkit

Vulnerability

Red Hat Polkit Incorrect Authorization Vulnerability

Added to KEV

May 12, 2023

Remediate by

Jun 2, 2023

Known ransomware use

No

Summary description

Red Hat Polkit contains an incorrect authorization vulnerability through the bypassing of credential checks for D-Bus requests, allowing for privilege escalation.

Required action

Apply updates per vendor instructions.

Notes

https://bugzilla.redhat.com/show_bug.cgi?id=1961710; https://nvd.nist.gov/vuln/detail/CVE-2021-3560

Related CVEs
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2021-40347.8 HIG
99.9%
KEV—80Red Hat Polkit Out-of-Bounds Read and Write Vulnerability62d