Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
Related vulnerabilities
OESA-2026-4000 (CVE-2026-85498)
Vulnerability from osv_openeuler – Published: 2026-09-20 13:24 – Updated: 2026-09-20 13:24 – Source website
VLAI
Summary
polkit security update
Details
polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes.
Security Fix(es):
A vulnerability, which was classified as very critical, was found in Polkit. The issue is a stack-based buffer overflow in the read_cookie function, which may impact confidentiality, integrity, and availability.(CVE-2026-85498)
Severity
4.6 (Medium)
References
| URL | Type | |
|---|---|---|
{
"affected": [
{
"ecosystem_specific": {
"aarch64": [
"polkit-0.116-13.oe2003sp4.aarch64.rpm",
"polkit-debuginfo-0.116-13.oe2003sp4.aarch64.rpm",
"polkit-debugsource-0.116-13.oe2003sp4.aarch64.rpm",
"polkit-devel-0.116-13.oe2003sp4.aarch64.rpm",
"polkit-libs-0.116-13.oe2003sp4.aarch64.rpm"
],
"noarch": [
"polkit-help-0.116-13.oe2003sp4.noarch.rpm"
],
"src": [
"polkit-0.116-13.oe2003sp4.src.rpm"
],
"x86_64": [
"polkit-0.116-13.oe2003sp4.x86_64.rpm",
"polkit-debuginfo-0.116-13.oe2003sp4.x86_64.rpm",
"polkit-debugsource-0.116-13.oe2003sp4.x86_64.rpm",
"polkit-devel-0.116-13.oe2003sp4.x86_64.rpm",
"polkit-libs-0.116-13.oe2003sp4.x86_64.rpm"
]
},
"package": {
"ecosystem": "openEuler:20.03-LTS-SP4",
"name": "polkit",
"purl": "pkg:rpm/openEuler/polkit\u0026distro=openEuler-20.03-LTS-SP4"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.116-13.oe2003sp4"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"database_specific": {
"severity": "Medium"
},
"details": "polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes.\r\n\r\nSecurity Fix(es):\n\nA vulnerability, which was classified as very critical, was found in Polkit. The issue is a stack-based buffer overflow in the read_cookie function, which may impact confidentiality, integrity, and availability.(CVE-2026-85498)",
"id": "OESA-2026-4000",
"modified": "2026-09-20T13:24:00Z",
"published": "2026-09-20T13:24:00Z",
"references": [
{
"type": "ADVISORY",
"url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4000"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85498"
}
],
"schema_version": "1.7.2",
"severity": [
{
"score": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"type": "CVSS_V3"
}
],
"summary": "polkit security update",
"upstream": [
"CVE-2026-85498"
]
}
OESA-2026-4001 (CVE-2026-85498)
Vulnerability from osv_openeuler – Published: 2026-09-20 13:24 – Updated: 2026-09-20 13:24 – Source website
VLAI
Summary
polkit security update
Details
polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes.
Security Fix(es):
A vulnerability, which was classified as very critical, was found in Polkit. The issue is a stack-based buffer overflow in the read_cookie function, which may impact confidentiality, integrity, and availability.(CVE-2026-85498)
Severity
4.6 (Medium)
References
| URL | Type | |
|---|---|---|
{
"affected": [
{
"ecosystem_specific": {
"aarch64": [
"polkit-0.120-13.oe2203sp4.aarch64.rpm",
"polkit-debuginfo-0.120-13.oe2203sp4.aarch64.rpm",
"polkit-debugsource-0.120-13.oe2203sp4.aarch64.rpm",
"polkit-devel-0.120-13.oe2203sp4.aarch64.rpm",
"polkit-libs-0.120-13.oe2203sp4.aarch64.rpm"
],
"noarch": [
"polkit-help-0.120-13.oe2203sp4.noarch.rpm"
],
"src": [
"polkit-0.120-13.oe2203sp4.src.rpm"
],
"x86_64": [
"polkit-0.120-13.oe2203sp4.x86_64.rpm",
"polkit-debuginfo-0.120-13.oe2203sp4.x86_64.rpm",
"polkit-debugsource-0.120-13.oe2203sp4.x86_64.rpm",
"polkit-devel-0.120-13.oe2203sp4.x86_64.rpm",
"polkit-libs-0.120-13.oe2203sp4.x86_64.rpm"
]
},
"package": {
"ecosystem": "openEuler:22.03-LTS-SP4",
"name": "polkit",
"purl": "pkg:rpm/openEuler/polkit\u0026distro=openEuler-22.03-LTS-SP4"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.120-13.oe2203sp4"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"database_specific": {
"severity": "Medium"
},
"details": "polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes.\r\n\r\nSecurity Fix(es):\n\nA vulnerability, which was classified as very critical, was found in Polkit. The issue is a stack-based buffer overflow in the read_cookie function, which may impact confidentiality, integrity, and availability.(CVE-2026-85498)",
"id": "OESA-2026-4001",
"modified": "2026-09-20T13:24:01Z",
"published": "2026-09-20T13:24:01Z",
"references": [
{
"type": "ADVISORY",
"url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4001"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85498"
}
],
"schema_version": "1.7.2",
"severity": [
{
"score": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"type": "CVSS_V3"
}
],
"summary": "polkit security update",
"upstream": [
"CVE-2026-85498"
]
}
OESA-2026-4002 (CVE-2026-85498)
Vulnerability from osv_openeuler – Published: 2026-09-20 13:24 – Updated: 2026-09-20 13:24 – Source website
VLAI
Summary
polkit security update
Details
polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes.
Security Fix(es):
A vulnerability, which was classified as very critical, was found in Polkit. The issue is a stack-based buffer overflow in the read_cookie function, which may impact confidentiality, integrity, and availability.(CVE-2026-85498)
Severity
4.6 (Medium)
References
| URL | Type | |
|---|---|---|
{
"affected": [
{
"ecosystem_specific": {
"aarch64": [
"polkit-123-5.oe2403sp1.aarch64.rpm",
"polkit-debuginfo-123-5.oe2403sp1.aarch64.rpm",
"polkit-debugsource-123-5.oe2403sp1.aarch64.rpm",
"polkit-devel-123-5.oe2403sp1.aarch64.rpm",
"polkit-libs-123-5.oe2403sp1.aarch64.rpm"
],
"noarch": [
"polkit-help-123-5.oe2403sp1.noarch.rpm"
],
"src": [
"polkit-123-5.oe2403sp1.src.rpm"
],
"x86_64": [
"polkit-123-5.oe2403sp1.x86_64.rpm",
"polkit-debuginfo-123-5.oe2403sp1.x86_64.rpm",
"polkit-debugsource-123-5.oe2403sp1.x86_64.rpm",
"polkit-devel-123-5.oe2403sp1.x86_64.rpm",
"polkit-libs-123-5.oe2403sp1.x86_64.rpm"
]
},
"package": {
"ecosystem": "openEuler:24.03-LTS-SP1",
"name": "polkit",
"purl": "pkg:rpm/openEuler/polkit\u0026distro=openEuler-24.03-LTS-SP1"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "123-5.oe2403sp1"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"database_specific": {
"severity": "Medium"
},
"details": "polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes.\r\n\r\nSecurity Fix(es):\n\nA vulnerability, which was classified as very critical, was found in Polkit. The issue is a stack-based buffer overflow in the read_cookie function, which may impact confidentiality, integrity, and availability.(CVE-2026-85498)",
"id": "OESA-2026-4002",
"modified": "2026-09-20T13:24:01Z",
"published": "2026-09-20T13:24:01Z",
"references": [
{
"type": "ADVISORY",
"url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4002"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85498"
}
],
"schema_version": "1.7.2",
"severity": [
{
"score": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"type": "CVSS_V3"
}
],
"summary": "polkit security update",
"upstream": [
"CVE-2026-85498"
]
}
OESA-2026-4003 (CVE-2026-85498)
Vulnerability from osv_openeuler – Published: 2026-09-20 13:24 – Updated: 2026-09-20 13:24 – Source website
VLAI
Summary
polkit security update
Details
polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes.
Security Fix(es):
A vulnerability, which was classified as very critical, was found in Polkit. The issue is a stack-based buffer overflow in the read_cookie function, which may impact confidentiality, integrity, and availability.(CVE-2026-85498)
Severity
4.6 (Medium)
References
| URL | Type | |
|---|---|---|
{
"affected": [
{
"ecosystem_specific": {
"aarch64": [
"polkit-123-5.oe2403sp3.aarch64.rpm",
"polkit-debuginfo-123-5.oe2403sp3.aarch64.rpm",
"polkit-debugsource-123-5.oe2403sp3.aarch64.rpm",
"polkit-devel-123-5.oe2403sp3.aarch64.rpm",
"polkit-libs-123-5.oe2403sp3.aarch64.rpm"
],
"noarch": [
"polkit-help-123-5.oe2403sp3.noarch.rpm"
],
"src": [
"polkit-123-5.oe2403sp3.src.rpm"
],
"x86_64": [
"polkit-123-5.oe2403sp3.x86_64.rpm",
"polkit-debuginfo-123-5.oe2403sp3.x86_64.rpm",
"polkit-debugsource-123-5.oe2403sp3.x86_64.rpm",
"polkit-devel-123-5.oe2403sp3.x86_64.rpm",
"polkit-libs-123-5.oe2403sp3.x86_64.rpm"
]
},
"package": {
"ecosystem": "openEuler:24.03-LTS-SP3",
"name": "polkit",
"purl": "pkg:rpm/openEuler/polkit\u0026distro=openEuler-24.03-LTS-SP3"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "123-5.oe2403sp3"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"database_specific": {
"severity": "Medium"
},
"details": "polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes.\r\n\r\nSecurity Fix(es):\n\nA vulnerability, which was classified as very critical, was found in Polkit. The issue is a stack-based buffer overflow in the read_cookie function, which may impact confidentiality, integrity, and availability.(CVE-2026-85498)",
"id": "OESA-2026-4003",
"modified": "2026-09-20T13:24:02Z",
"published": "2026-09-20T13:24:02Z",
"references": [
{
"type": "ADVISORY",
"url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4003"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85498"
}
],
"schema_version": "1.7.2",
"severity": [
{
"score": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"type": "CVSS_V3"
}
],
"summary": "polkit security update",
"upstream": [
"CVE-2026-85498"
]
}
OESA-2026-4050 (CVE-2026-85498)
Vulnerability from osv_openeuler – Published: 2026-09-25 01:27 – Updated: 2026-09-25 01:27 – Source website
VLAI
Summary
polkit security update
Details
polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes.
Security Fix(es):
A vulnerability, which was classified as very critical, was found in Polkit. The issue is a stack-based buffer overflow in the read_cookie function, which may impact confidentiality, integrity, and availability.(CVE-2026-85498)
Severity
4.6 (Medium)
References
| URL | Type | |
|---|---|---|
{
"affected": [
{
"ecosystem_specific": {
"aarch64": [
"polkit-123-5.oe2403sp4.aarch64.rpm",
"polkit-debuginfo-123-5.oe2403sp4.aarch64.rpm",
"polkit-debugsource-123-5.oe2403sp4.aarch64.rpm",
"polkit-devel-123-5.oe2403sp4.aarch64.rpm",
"polkit-libs-123-5.oe2403sp4.aarch64.rpm"
],
"noarch": [
"polkit-help-123-5.oe2403sp4.noarch.rpm"
],
"src": [
"polkit-123-5.oe2403sp4.src.rpm"
],
"x86_64": [
"polkit-123-5.oe2403sp4.x86_64.rpm",
"polkit-debuginfo-123-5.oe2403sp4.x86_64.rpm",
"polkit-debugsource-123-5.oe2403sp4.x86_64.rpm",
"polkit-devel-123-5.oe2403sp4.x86_64.rpm",
"polkit-libs-123-5.oe2403sp4.x86_64.rpm"
]
},
"package": {
"ecosystem": "openEuler:24.03-LTS-SP4",
"name": "polkit",
"purl": "pkg:rpm/openEuler/polkit\u0026distro=openEuler-24.03-LTS-SP4"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "123-5.oe2403sp4"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"database_specific": {
"severity": "Medium"
},
"details": "polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes.\r\n\r\nSecurity Fix(es):\n\nA vulnerability, which was classified as very critical, was found in Polkit. The issue is a stack-based buffer overflow in the read_cookie function, which may impact confidentiality, integrity, and availability.(CVE-2026-85498)",
"id": "OESA-2026-4050",
"modified": "2026-09-25T01:27:41Z",
"published": "2026-09-25T01:27:41Z",
"references": [
{
"type": "ADVISORY",
"url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4050"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85498"
}
],
"schema_version": "1.7.2",
"severity": [
{
"score": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"type": "CVSS_V3"
}
],
"summary": "polkit security update",
"upstream": [
"CVE-2026-85498"
]
}
RHSA-2026:66287
Vulnerability from csaf_redhat - Published: 2026-09-10 01:41 - Updated: 2026-09-10 17:23Summary
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Severity
Moderate
Scope
2 vulnerabilities in this advisory, including CVE-2026-85498.
CVE-2026-85498
No description is available for this CVE.
Fixed: 4 products
https://access.redhat.com/errata/RHSA-2026:66287
UBUNTU-CVE-2026-85498 (CVE-2026-85498)
Vulnerability from osv_ubuntu – Published: 2026-09-07 00:00 – Updated: 2026-09-15 17:56 – Source website
VLAI
Details
[Regression in CVE-2026-4897 fix (polkit read_cookie()) - stack buffer underflow]
Severity
N/A (UNKNOWN)
References
| URL | Type | |
|---|---|---|
{
"affected": [
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "gir1.2-polkit-1.0",
"binary_version": "0.105-4ubuntu3.14.04.6+esm1"
},
{
"binary_name": "libpolkit-agent-1-0",
"binary_version": "0.105-4ubuntu3.14.04.6+esm1"
},
{
"binary_name": "libpolkit-backend-1-0",
"binary_version": "0.105-4ubuntu3.14.04.6+esm1"
},
{
"binary_name": "libpolkit-gobject-1-0",
"binary_version": "0.105-4ubuntu3.14.04.6+esm1"
},
{
"binary_name": "policykit-1",
"binary_version": "0.105-4ubuntu3.14.04.6+esm1"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:14.04:LTS",
"name": "policykit-1",
"purl": "pkg:deb/ubuntu/policykit-1@0.105-4ubuntu3.14.04.6+esm1?arch=source\u0026distro=esm-infra-legacy/trusty"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"0.105-3ubuntu3",
"0.105-4ubuntu1",
"0.105-4ubuntu2",
"0.105-4ubuntu2.14.04.1",
"0.105-4ubuntu3.14.04.1",
"0.105-4ubuntu3.14.04.2",
"0.105-4ubuntu3.14.04.5",
"0.105-4ubuntu3.14.04.6",
"0.105-4ubuntu3.14.04.6+esm1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "gir1.2-polkit-1.0",
"binary_version": "0.105-14.1ubuntu0.5+esm1"
},
{
"binary_name": "libpolkit-agent-1-0",
"binary_version": "0.105-14.1ubuntu0.5+esm1"
},
{
"binary_name": "libpolkit-backend-1-0",
"binary_version": "0.105-14.1ubuntu0.5+esm1"
},
{
"binary_name": "libpolkit-gobject-1-0",
"binary_version": "0.105-14.1ubuntu0.5+esm1"
},
{
"binary_name": "policykit-1",
"binary_version": "0.105-14.1ubuntu0.5+esm1"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:16.04:LTS",
"name": "policykit-1",
"purl": "pkg:deb/ubuntu/policykit-1@0.105-14.1ubuntu0.5+esm1?arch=source\u0026distro=esm-infra/xenial"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"0.105-11ubuntu2",
"0.105-13",
"0.105-13ubuntu1",
"0.105-14",
"0.105-14.1",
"0.105-14.1ubuntu0.1",
"0.105-14.1ubuntu0.4",
"0.105-14.1ubuntu0.5",
"0.105-14.1ubuntu0.5+esm1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "gir1.2-polkit-1.0",
"binary_version": "0.105-20ubuntu0.18.04.6"
},
{
"binary_name": "libpolkit-agent-1-0",
"binary_version": "0.105-20ubuntu0.18.04.6"
},
{
"binary_name": "libpolkit-backend-1-0",
"binary_version": "0.105-20ubuntu0.18.04.6"
},
{
"binary_name": "libpolkit-gobject-1-0",
"binary_version": "0.105-20ubuntu0.18.04.6"
},
{
"binary_name": "policykit-1",
"binary_version": "0.105-20ubuntu0.18.04.6"
}
]
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "policykit-1",
"purl": "pkg:deb/ubuntu/policykit-1@0.105-20ubuntu0.18.04.6?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"0.105-18",
"0.105-20",
"0.105-20ubuntu0.18.04.1",
"0.105-20ubuntu0.18.04.4",
"0.105-20ubuntu0.18.04.5",
"0.105-20ubuntu0.18.04.6"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "gir1.2-polkit-1.0",
"binary_version": "0.105-26ubuntu1.3"
},
{
"binary_name": "libpolkit-agent-1-0",
"binary_version": "0.105-26ubuntu1.3"
},
{
"binary_name": "libpolkit-gobject-1-0",
"binary_version": "0.105-26ubuntu1.3"
},
{
"binary_name": "policykit-1",
"binary_version": "0.105-26ubuntu1.3"
}
]
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "policykit-1",
"purl": "pkg:deb/ubuntu/policykit-1@0.105-26ubuntu1.3?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"0.105-26ubuntu1",
"0.105-26ubuntu1.1",
"0.105-26ubuntu1.2",
"0.105-26ubuntu1.3"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "gir1.2-polkit-1.0",
"binary_version": "0.105-33ubuntu0.2"
},
{
"binary_name": "libpolkit-agent-1-0",
"binary_version": "0.105-33ubuntu0.2"
},
{
"binary_name": "libpolkit-gobject-1-0",
"binary_version": "0.105-33ubuntu0.2"
},
{
"binary_name": "pkexec",
"binary_version": "0.105-33ubuntu0.2"
},
{
"binary_name": "policykit-1",
"binary_version": "0.105-33ubuntu0.2"
},
{
"binary_name": "polkitd",
"binary_version": "0.105-33ubuntu0.2"
}
]
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "policykit-1",
"purl": "pkg:deb/ubuntu/policykit-1@0.105-33ubuntu0.2?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.105-33ubuntu0.2"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"0.105-31",
"0.105-31ubuntu1",
"0.105-31.1",
"0.105-32",
"0.105-33",
"0.105-33ubuntu0.1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "gir1.2-polkit-1.0",
"binary_version": "124-2ubuntu1.24.04.4"
},
{
"binary_name": "libpolkit-agent-1-0",
"binary_version": "124-2ubuntu1.24.04.4"
},
{
"binary_name": "libpolkit-gobject-1-0",
"binary_version": "124-2ubuntu1.24.04.4"
},
{
"binary_name": "pkexec",
"binary_version": "124-2ubuntu1.24.04.4"
},
{
"binary_name": "policykit-1",
"binary_version": "124-2ubuntu1.24.04.4"
},
{
"binary_name": "polkitd",
"binary_version": "124-2ubuntu1.24.04.4"
},
{
"binary_name": "polkitd-pkla",
"binary_version": "124-2ubuntu1.24.04.4"
}
]
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "policykit-1",
"purl": "pkg:deb/ubuntu/policykit-1@124-2ubuntu1.24.04.4?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "124-2ubuntu1.24.04.4"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"123-1",
"123-3",
"124-1",
"124-1ubuntu1",
"124-2ubuntu1",
"124-2ubuntu1.24.04.2",
"124-2ubuntu1.24.04.3"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "gir1.2-polkit-1.0",
"binary_version": "127-2ubuntu1.1"
},
{
"binary_name": "libpolkit-agent-1-0",
"binary_version": "127-2ubuntu1.1"
},
{
"binary_name": "libpolkit-gobject-1-0",
"binary_version": "127-2ubuntu1.1"
},
{
"binary_name": "pkexec",
"binary_version": "127-2ubuntu1.1"
},
{
"binary_name": "polkitd",
"binary_version": "127-2ubuntu1.1"
}
]
},
"package": {
"ecosystem": "Ubuntu:26.04:LTS",
"name": "policykit-1",
"purl": "pkg:deb/ubuntu/policykit-1@127-2ubuntu1.1?arch=source\u0026distro=resolute"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "127-2ubuntu1.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"126-2",
"127-1",
"127-2",
"127-2ubuntu1"
]
}
],
"aliases": [],
"details": "[Regression in CVE-2026-4897 fix (polkit read_cookie()) - stack buffer underflow]",
"id": "UBUNTU-CVE-2026-85498",
"modified": "2026-09-15T17:56:38Z",
"published": "2026-09-07T00:00:00Z",
"references": [
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2026-85498"
},
{
"type": "REPORT",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-85498"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-8762-1"
}
],
"related": [
"USN-8762-1"
],
"schema_version": "1.7.0",
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
],
"upstream": [
"CVE-2026-85498"
]
}