Threat database

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.5	EPSS 0.2%	CVE-2025-14338https://github.com/ShadowBlip inputplumber · Improper Access Control High8.5EPSS 0.2%2026-01-14CVE Database V5CVE-2025-14338 Polkit authentication dis isabled by default and a race condition in the Polkit authorization check in versions before v0.69.0 can lead to the same issues as in CVE-2025-66005. EPSS 0.2%Vulnerability CWE-284	CVE Database V5	2026-01-14
High	8.5	EPSS 0.2%	CVE-2025-66005https://github.com/ShadowBlip inputplumber · Improper Authorization High8.5EPSS 0.2%2026-01-14CVE Database V5CVE-2025-66005 Lack of authorization of the InputManager D-Bus interface in InputPlumber versions before v0.63.0 can lead to local Denial-of-Service, information leak or even privilege escalation in the context of the currently active user session. EPSS 0.2%Vulnerability CWE-863	CVE Database V5	2026-01-14

Page 1 of 1