Vendor
Accountsservice
Products
1
CVEs
3
Across products
3
Status
Private
Products
1- 3 CVEs
Recent CVEs
3| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-16743 | Med | 0.36 | 5.5 | 0.00 | Jul 24, 2026 | A flaw was found in accountsservice. The systemd-homed code path for SetIconFile opens a user-supplied filename as root without the validation and privilege drop performed by the classic handler. A local attacker with a systemd-homed-managed account can read arbitrary files… | ||
| CVE-2022-1804 | Med | 0.36 | 5.5 | 0.00 | Mar 25, 2025 | accountsservice no longer drops permissions when writting .pam_environment | ||
| CVE-2012-6655 | Low | 0.21 | 3.3 | 0.00 | Nov 27, 2019 | An issue exists AccountService 0.6.37 in the user_change_password_authorized_cb() function in user.c which could let a local users obtain encrypted passwords. |
- risk 0.36cvss 5.5epss 0.00
A flaw was found in accountsservice. The systemd-homed code path for SetIconFile opens a user-supplied filename as root without the validation and privilege drop performed by the classic handler. A local attacker with a systemd-homed-managed account can read arbitrary files…
- risk 0.36cvss 5.5epss 0.00
accountsservice no longer drops permissions when writting .pam_environment
- risk 0.21cvss 3.3epss 0.00
An issue exists AccountService 0.6.37 in the user_change_password_authorized_cb() function in user.c which could let a local users obtain encrypted passwords.