VULNERABILITY INTELLIGENCE

CVE-2015-3256

CVSS score4.6 MEDIUM
EPSS probability0.35%
CISA KEVNot currently listed
Published2015-10-26
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P

Description

PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (memory corruption and polkitd daemon crash) and possibly gain privileges via unspecified vectors, related to "javascript rule evaluation."

Primary references