CVE-2021-4034

CISA KEV RANSOMWARE

ACT NOW Priority: 0.00 BB Relevance: 0/100

Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability that allows for privilege escalation with administrative rights.

CISA Known Exploited Vulnerability

Vendor / Product Red Hat — Polkit

Date Added 2022-06-27

Remediation Due 2022-07-18

Ransomware Use CONFIRMED

https://nvd.nist.gov/vuln/detail/CVE-2021-4034

Weakness Classification (2)

CWE-125 CWE-787

Affected Software (54)

Vendor	Product	Version
canonical	ubuntu_linux	14.04
canonical	ubuntu_linux	16.04
canonical	ubuntu_linux	18.04
canonical	ubuntu_linux	20.04
canonical	ubuntu_linux	21.10
oracle	http_server	12.2.1.3.0
oracle	http_server	12.2.1.4.0
oracle	zfs_storage_appliance_kit	8.8
polkit_project	polkit	< 121
redhat	enterprise_linux	8.0
redhat	enterprise_linux_desktop	7.0
redhat	enterprise_linux_eus	8.2
redhat	enterprise_linux_for_ibm_z_systems	7.0
redhat	enterprise_linux_for_ibm_z_systems	8.0
redhat	enterprise_linux_for_ibm_z_systems_eus	8.2
redhat	enterprise_linux_for_ibm_z_systems_eus	8.4
redhat	enterprise_linux_for_power_big_endian	7.0
redhat	enterprise_linux_for_power_little_endian	7.0
redhat	enterprise_linux_for_power_little_endian	8.0
redhat	enterprise_linux_for_power_little_endian_eus	8.1
redhat	enterprise_linux_for_power_little_endian_eus	8.2
redhat	enterprise_linux_for_power_little_endian_eus	8.4
redhat	enterprise_linux_for_scientific_computing	7.0
redhat	enterprise_linux_server	6.0
redhat	enterprise_linux_server	7.0
redhat	enterprise_linux_server_aus	7.3
redhat	enterprise_linux_server_aus	7.4
redhat	enterprise_linux_server_aus	7.6
redhat	enterprise_linux_server_aus	7.7
redhat	enterprise_linux_server_aus	8.2