Skip to content
OpenAdvisories

Vendor

z-galaxy

1 known vulnerabilities.

Products

zbus_polkit 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2026-78422

    zbus_polkit: polkit authorization bypass via PID reuse due to incorrect D-Bus type for the subject UID

    Subject::new_for_owner() in the zbus_polkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer (D-Bus type u), whereas the org.freedesktop.PolicyKit1.Authority interface specifies a signed 32-bit integer (D-Bus type i).…

    z-galaxy zbus_polkit rust-zbus-polkit zbus_polkit Debian Ubuntu crates.io