CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

CVE	Vendor	Product	Added	Due	Status
CVE-2021-3560 — Red Hat Polkit Incorrect Authorization Vulnerability Red Hat Polkit contains an incorrect authorization vulnerability through the bypassing of credential checks for D-Bus requests, allowing for privilege escalation.	Red Hat	Polkit	May 12, 2023	Jun 2, 2023
CVE-2021-4034 — Red Hat Polkit Out-of-Bounds Read and Write Vulnerability The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability that allows for privilege escalation with administrative rights.	Red Hat	Polkit	Jun 27, 2022	Jul 18, 2022	Ransomware

Red Hat

CVE-2021-3560 — Red Hat Polkit Incorrect Authorization Vulnerability

Red Hat Polkit contains an incorrect authorization vulnerability through the bypassing of credential checks for D-Bus requests, allowing for privilege escalation.

Polkit · May 12, 2023

Ransomware Red Hat

CVE-2021-4034 — Red Hat Polkit Out-of-Bounds Read and Write Vulnerability

The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability that allows for privilege escalation with administrative rights.

Polkit · Jun 27, 2022