https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T09:49:50.639977+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2013-4324 CVE-2013-4324 2026-09-28T09:49:50.641415+00:00

spice-gtk 0.14, and possibly other versions, invokes the polkit authority using the insecure polkit_unix_process_new API function, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.