CVE-2015-3255

CVE-2015-3255 describes a local privilege escalation vulnerability in PolicyKit (polkit) versions prior to 0.113, specifically within the polkit_backend_action_pool_init function. An attacker could exploit this by submitting duplicate action IDs in action descriptions, potentially gaining elevated privileges on the affected system. With a CVSS score of 4.6 (AV:L/AC:L/Au:N/C:P/I:P/A:P), this vulnerability requires local access and has low attack complexity, leading to potential partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.