Skip to content

Vendor

selinuxproject vulnerabilities

3 published CVES affecting selinuxproject, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
0
Medium
3
Low
0
Unscored
0
CISA KEV
0
Atom feed of selinuxproject alerts

Products

Latest selinuxproject CVEs

Newest publication first

  1. CVE-2026-59677 Process Kill Attack Vector in killall() in seunshare

    Published
    MediumCVSS 6.8 EPSS 0.14%

    A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in unconfined context This issue affects policycoreutils through 3.10.

  2. CVE-2026-59676 Local File Deletion Attack Vector in rm_rf() in seunshare

    Published
    MediumCVSS 5.8 EPSS 0.10%

    A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in seunshare of selinux policycoreutils allows a user calling seunshare that is running in the unconfined SELinux domain to delete arbitrary root-owned files, This issue affects policycoreutils through 3.10.

  3. CVE-2014-3215 seunshare in policycoreutils 2.2.5 is owned by root with 4755 permissions, and executes programs in a way that changes the relationship between the setuid system call and the getresuid saved set-user-...

    Published
    MediumCVSS 6.9 EPSS 0.36%

    seunshare in policycoreutils 2.2.5 is owned by root with 4755 permissions, and executes programs in a way that changes the relationship between the setuid system call and the getresuid saved set-user-ID value, which makes it easier for local users to gain privileges by leveraging...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.