pkexec.c in pkexec in libpolkit in PolicyKit 0.96 allows local users to determine the existence of arbitrary files via the argument.

published 2010-04-06 16 y ago modified 2026-06-16 4 mo ago also EUVD-2010-0776

cvss: 2.1; version 2.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 0.5%; EPSS 0.5% chance of exploitation in 30 days, percentile 40%
public exploits: 0; none known

Patch / fix

links 2

Exploit prediction

0.47% chance of exploitation in the next 30 days, higher than 40% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

cgit.freedesktop.org http://cgit.freedesktop.org/PolicyKit/commit/?id=14bdfd816512a82b1ad258fa143ae5faa945df8a referenced PoC, tagged "exploit" by a source, unverified
bugs.freedesktop.org http://bugs.freedesktop.org/show_bug.cgi?id=26982 referenced PoC, tagged "exploit" by a source, unverified
launchpad.net https://launchpad.net/bugs/532852 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
NVD	2.0	2.1	AV:L/AC:L/Au:N/C:P/I:N/A:N

Classification

Weakness

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References

cgit.freedesktop.org /PolicyKit/commit/?id=14bdfd816512a82b1ad258fa143ae5faa945df8a
exploit, patch
bugs.freedesktop.org /show_bug.cgi?id=26982
exploit, patch
launchpad.net /bugs/532852
exploit
security.gentoo.org /glsa/glsa-201204-06.xml
vendor-advisory
secunia.com /advisories/39149
third-party-advisory, vendor-advisory
exchange.xforce.ibmcloud.com /vulnerabilities/57543
vdb-entry
marc.info /?l=oss-security&m=127014095301235&w=2
mailing-list
secunia.com /advisories/48817
third-party-advisory
marc.info /?l=oss-security&m=127014999113790&w=2
mailing-list

Sources

CVE List CVE-2010-0750
NVD CVE-2010-0750

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary