CVSS 3.1
6.1 mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:HCVE-2021-20315
Medium (6.1). EPSS 0.2% chance of exploitation in the next 30 days.
A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the "Application menu" or "Window list" GNOME extensions are enabled. This flaw allows a physical attacker who has access to a locked system to kill existing applications and start new ones as the locked user, even if the session is still locked.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-10-31)
- CWE
- CWE-667
- Published
- Modified
- Record from
- the NVD, synced
Affected
- centos:stream
- gnome:gnome-shell