Login Request a demo
AC
Product
accountsservice
by Canonical · last CVE Aug 20, 2026
6
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 4Medium 1Low 0
Severity
All severities6Critical0High4Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add accountsservice to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-61898
7.8
0%
Aug 20
accountsservice: shell injection via attacker-controlled ~/.pam_environment in Ubuntu language helper scripts
Affected: 22.07.5-2ubuntu1 before 22.07.5-2ubuntu1.6; 23.13.9-2ubuntu6 before 23.13.9-2ubuntu6.1; 23.13.9-8ubuntu5 before 23.13.9-8ubuntu5.2; 23.13.9-8ubuntu6 before 23.13.9-8ubuntu7
CVE-2026-61897
7.8
0%
Aug 20
accountsservice: incomplete privilege drop when running Ubuntu-specific language helper scripts
Affected: 22.07.5-2ubuntu1 before 22.07.5-2ubuntu1.6; 23.13.9-2ubuntu6 before 23.13.9-2ubuntu6.1; 23.13.9-8ubuntu5 before 23.13.9-8ubuntu5.2; 23.13.9-8ubuntu6 before 23.13.9-8ubuntu7
CVE-2023-3297
7.8
0%
Sep 1
In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process
Affected: before 23.13.9-2ubuntu2; before 22.08.8-1ubuntu7.1; before 22.08.8-1ubuntu7.1; before 22.07.5-2ubuntu1.4; before 0.6.55-0ubuntu12\~20.04.6
CVE-2021-3939
7.8
0%
Nov 17
Ubuntu-specific modifications to accountsservice (in patch file debian/patches/0010-set-language.patch) caused the fallback_locale variable, pointing to static storage, to be…
Affected: 0.6.55-0ubuntu12\~20.04 before 0.6.55-0ubuntu12\~20.05; 0.6.55-0ubuntu13 before 0.6.55-0ubuntu13.3; 0.6.55-0ubuntu14 before 0.6.55-0ubuntu14.1
Showing 4