Freedesktop

Records159All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high50CVSS 7.0–8.9

Exploited now

Freedesktop records in CISA KEV

TI-2021-11232 Apple Multiple Products Integer Overflow Vulnerability CRITICAL 93KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Poppler 88 records CRITICAL Dbus 24 records MEDIUM Udisks 5 records LOW Xdg-utils 5 records HIGH Libinput 4 records HIGH Accountsservice 3 records LOW Gst-plugins-good 3 records LOW Dbus-glib 2 records LOW

Records

5 records in Udisks · all components

TI-2018-12362 CVE-2018-17336 · GHSA-wc77-2q7w-jfm4

UDisks 2.8.0 has a format string vulnerability in udisks_log in udiskslogging.c, allowing…

LOW 35

UDisks 2.8.0 has a format string vulnerability in udisks_log in udiskslogging.c, allowing attackers to obtain sensitive information (stack contents), cause a denial of service (memory corruption), or possibly have unspec…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00622 Published 2018-09-22 Partial fix CWE-134

TI-2014-00004 CVE-2014-0004 · GHSA-jqwr-w7rw-fwpf

Stack-based buffer overflow in udisks before 1.0.5 and 2.x before 2.1.3 allows local…

LOW 31

Stack-based buffer overflow in udisks before 1.0.5 and 2.x before 2.1.3 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long mount point.

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.0043 Published 2014-03-11 Fixed CWE-119

TI-2026-21097 CVE-2026-26103 · GHSA-fw7p-cggr-9xm6

Udisks: missing authorization check allows unprivileged users to restore luks headers via udisks d-bus api

LOW 30

A flaw was found in the udisks storage management daemon that exposes a privileged D-Bus API for restoring LUKS encryption headers without proper authorization checks.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00082 Published 2026-02-25 Fixed in 2.10.90-6.el10_1.1, 2.10.90-5.el10_0.2 CWE-862

TI-2026-21098 CVE-2026-26104 · GHSA-hjgq-ff5j-5v2m

Udisks: missing authorization check allows unprivileged users to back up luks headers via udisks d-bus api

LOW 23

A flaw was found in the udisks storage management daemon that allows unprivileged users to back up LUKS encryption headers without authorization.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00082 Published 2026-02-25 Fixed in 2.10.90-6.el10_1.1, 2.10.90-5.el10_0.2 CWE-862

TI-2010-01106 CVE-2010-1149 · GHSA-5hh6-fqvm-v5v8

probers/udisks-dm-export.c in udisks before 1.0.1 exports UDISKS_DM_TARGETS_PARAMS…

LOW 11

probers/udisks-dm-export.c in udisks before 1.0.1 exports UDISKS_DM_TARGETS_PARAMS information to udev even for a crypt UDISKS_DM_TARGETS_TYPE, which allows local users to discover encryption keys by (1) running a certai…

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00269 Published 2010-04-12 No fix listed CWE-200

Open these records in search →

Critical	6
High	50
Medium	84
Low	19
No CVSS	0