CVE-2010-4664: Consolekit Project Consolekit

High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days.

In ConsoleKit before 0.4.2, an intended security policy restriction bypass was found. This flaw allows an authenticated system user to escalate their privileges by initiating a remote VNC session.

Affected products

• Consolekit Project Consolekit: before 0.4.2 (fixed in 0.4.2)
• Debian Debian Linux: version 8.0 only; version 9.0 only
• Red Hat Enterprise Linux: version 6.0 only

Published 2019-11-13. Last modified 2026-06-16.