Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2021-3560

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVSS 7.8 · HighBuzz score 65.5KEV listed1 public exploit repository references

Buzz score

Why this CVE is surfacing

Buzz score total 65.5

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 22.0 · diversity 13.0 · KEV 25.0 · OTX 0.0 · PoC 5.5
Mention score
22.0
8 evidence mentions in the snapshot
Diversity score
13.0
4 sources across 2 categories
KEV score
25.0
Known exploited vulnerability present
OTX score
0.0
0 OTX pulses
PoC score
5.5
1 repos · best confidence 0.99
Best PoC traction
1
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
8 source links · newest first
  • The GitHub Security Lab’s journey to disclosing 500 CVEs in open source projectsGitHub Security Lab

    The GitHub Security Lab audits open source projects for security vulnerabilities and helps maintainers fix them. Recently, we passed the milestone of 500 CVEs disclosed. Let’s take a trip down memory lane with a review of some noteworthy CVEs!

    vendorgithub.blogSep 21, 2023, 8:56 PM
  • CISA adds Ruckus bug and another six flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs

    US Cybersecurity and Infrastructure Security Agency (CISA) added seven new flaws to its Known Exploited Vulnerabilities catalog. U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the following three new issues to its Known Exploited Vulnerabilities Catalog: CVE-2023-25717 – Ruckus Wireless Access Point (AP) software contains an unspecified vulnerability in the web services component. If the […]

    newssecurityaffairs.comMay 16, 2023, 12:36 PM
  • CISA: Several Old Linux Vulnerabilities Exploited in AttacksSecurityWeek

    Several old Linux vulnerabilities for which there are no public reports of malicious exploitation have been added to CISA’s KEV catalog.

    newswww.securityweek.comMay 15, 2023, 8:48 AM
  • 14th June – Threat Intelligence ReportCheck Point Research

    For the latest discoveries in cyber research for the week of 14th June, please download our Threat Intelligence Bulletin. Top Attacks and Breaches Audi and Volkswagen have experienced data breaches that affected 3.3 million customers. Between August 2019 and May 2021, unsecured data was left exposed on the internet by a mutual vendor. During that […]

    vendorresearch.checkpoint.comJun 14, 2021, 3:27 PM
  • Security Affairs newsletter Round 318Security Affairs

    A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs free for you in your email box. If you want to also receive for free the international press subscribe here. REvil Ransomware spokesman releases an interview on recent attacks Chinese SharpPanda APT developed a new backdoor in the […]

    newssecurityaffairs.comJun 13, 2021, 12:23 PM
  • CVE-2021-3560 flaw in polkit auth system service affects most of Linux distrosSecurity Affairs

    An authentication bypass flaw in the polkit auth system service used on most Linux distros can allow to get a root shell. An authentication bypass vulnerability in the polkit auth system service, tracked as CVE-2021-3560, which is used on most Linux distros can allow an unprivileged attacker to get a root shell. “A flaw was found […]

    newssecurityaffairs.comJun 12, 2021, 12:02 PM
  • GitHub Discloses Details of Easy-to-Exploit Linux VulnerabilitySecurityWeek

    GitHub this week disclosed the details of an easy-to-exploit Linux vulnerability that can be leveraged to escalate privileges to root on the targeted system. The flaw, classified as high severity and tracked as CVE-2021-3560, impacts polkit, an authorization service that is present by default in many Linux distributions.

    newswww.securityweek.comJun 11, 2021, 1:09 PM
  • Privilege escalation with polkit: How to get root on Linux with a seven-year-old bugGitHub Security Lab

    polkit is a system service installed by default on many Linux distributions. It’s used by systemd, so any Linux distribution that uses systemd also uses polkit.

    vendorgithub.blogJun 10, 2021, 4:00 PM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

1 repository references · best confidence 0.99 · max 1 stars
  • Gerberayale521/pwnkitHigh confidence
    githubDiscovery source unavailable1 starsDiscovered Jul 9, 2026, 1:19 AM

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence