Vulnerability intelligence
CVE-2021-4034
Red Hat Polkit Out-of-Bounds Read and Write Vulnerability
Red Hat Polkit
The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability that allows for privilege escalation with administrative rights.
CVSS Score
—
Unrated
EPSS — Exploit Probability
95%
Riskier than 100% of all CVEs · checked 2026-09-04
Exploitation
Confirmed in the wild
Used in ransomware campaigns
Remediation
Unconfirmed
Federal deadline 2022-07-18
CISA required action
Apply updates per vendor instructions. Deadline for federal agencies: 2022-07-18.
1 article across 1 outlet · first covered Mar 4, 2026 · latest Mar 4, 2026
Coverage timeline
-
Darktrace FAI links cloud breach to perfctl using CVE-2021-4034www.darktrace.com · Mar 4, 2026