Skip to content
Sign in

Red Hat product

Polkit

Alert
No CISA KEV deadline is open. CISA last added a Polkit CVE on 12 May 2023.

Tracked since 4 Mar · latest article 15 Oct · RSS · API

0Open KEV deadlines

None open

0Added to KEV · 90 days

of 2 in the full CISA catalogue · all time

0High exploit odds · current

EPSS top 5%, not in KEV

0Articles · 7 days

none this week

Exploited, by due date2

Polkit CVEs in CISA KEV with their federal deadlines. None is open.

Exploited Polkit CVEs
CVEProductAddedFederal deadlineArticles
In CISA KEVCVE-2021-3560Polkit12 MayPassed 2 Jun–
In CISA KEVCVE-2021-4034RansomwarePolkit27 JunPassed 18 Jul2
Vendor CSV of 9 entries for Red HatAll 9 vendor entries, including other products.

Patch cadence and exploit odds

How often CISA adds Polkit CVEs, how many have a fix, and where their exploit odds sit.

Added to CISA KEV per quarter

0Q1 ’250Q2 ’250Q3 ’250Q4 ’250Q1 ’260Q2 ’260Q3 ’260Q4 ’26
Show as table
Added to CISA KEV per quarter
QuarterAdded
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20260
Q4 20260

No additions in the last eight quarters.

Fix listed

0 of 1 CVE in coverage

1 CVE has no vendor fix recorded yet.

EPSS percentile of each CVE

One dot per CVE; a red diamond marks those in CISA KEV.

top 5%CVE-2021-4034: 99.9th percentile, in CISA KEV050100
Show as table
FIRST EPSS percentiles across CVEs in coverage
CVEEPSS percentile
CVE-2021-403499.9

Coverage2 articles · all time

The latest 2 articles naming Polkit, in the shared story grammar.

Full timeline
Quiet for 12 dayslast report 15 Oct2 articles2 outlets

2 articles from 2 outlets since 4 Mar. Quiet since 15 Oct.

Now4 Mar614 Oct1719212325First reportDarktrace · 4 Mar, 21:50Picked up againafter 32 weeks quiet
  • Wed 4 Mar, 21:50 UTC. Darktrace, first report. Darktrace FAI links cloud breach to perfctl using CVE-2021-4034. Cites a CVE in CISA KEV.
  • Thu 15 Oct, 22:25 UTC. Unit 42, its first report on the story. AI-Enabled Espionage Campaign Targets Government Linux Systems. Cites a CVE in CISA KEV.
  • Known exploited CVE
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
  • Quiet time, folded
Show all 2 articles as a list
  1. Wed 4 MarDay 01
    1. Darktrace FAI links cloud breach to perfctl using CVE-2021-403421:50 · Darktrace · First report · Exploited CVE · Known exploited CVE

  2. Quiet for 32 weeks

    Thu 15 OctDay 2251
    1. AI-Enabled Espionage Campaign Targets Government Linux Systems22:25 · Unit 42 · Picked up again · Known exploited CVE

All CVEs in coverage1

Exploited first, then by EPSS

In the CVE tracker
  • CVE-2021-4034Exploited

    Red Hat Polkit Out-of-Bounds Read and Write Vulnerability

    Not scored95% EPSS · 2 articles
CyberSIXTSignal over noise
Updated AboutDevelopersSign in