CVE-2021-3800

A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition.

• CWE-200
• CWE-552

• https://access.redhat.com/security/cve/CVE-2021-3800Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1938284Issue Tracking, Patch, Third Party Advisory
• https://gitlab.gnome.org/GNOME/glib/-/commit/3529bb4450a51995Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2022/09/msg00020.htmlMailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20221028-0004/Third Party Advisory
• https://www.openwall.com/lists/oss-security/2017/06/23/8Exploit, Mailing List, Patch, Third Party Advisory
• https://access.redhat.com/security/cve/CVE-2021-3800Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1938284Issue Tracking, Patch, Third Party Advisory
• https://gitlab.gnome.org/GNOME/glib/-/commit/3529bb4450a51995Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2022/09/msg00020.htmlMailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20221028-0004/Third Party Advisory
• https://www.openwall.com/lists/oss-security/2017/06/23/8Exploit, Mailing List, Patch, Third Party Advisory

Published

Aug 23, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-37994Inappropriate implementation in iFrame Sandbox in Google Chr…6.5
• CVE-2021-37995Inappropriate implementation in WebApp Installer in Google C…6.5
• CVE-2021-37996Insufficient validation of untrusted input Downloads in Goog…5.5
• CVE-2021-37997Use after free in Sign-In in Google Chrome prior to 95.0.463…8.8
• CVE-2021-37998Use after free in Garbage Collection in Google Chrome prior …8.8
• CVE-2021-37999Insufficient data validation in New Tab Page in Google Chrom…6.1
• CVE-2021-38000Insufficient validation of untrusted input in Intents in Goo…6.1
• CVE-2021-38001Type confusion in V8 in Google Chrome prior to 95.0.4638.69 …8.8
• CVE-2021-38002Use after free in Web Transport in Google Chrome prior to 95…9.6
• CVE-2021-38003Inappropriate implementation in V8 in Google Chrome prior to…8.8
• CVE-2021-38004Insufficient policy enforcement in Autofill in Google Chrome…4.3
• CVE-2021-38005Use after free in loader in Google Chrome prior to 96.0.4664…8.8