Vulnerability identifier: #VU67606

Vulnerability risk: Low

CVSSv3.1: 8.2 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:F/RL:O/RC:C]

CVE-ID: CVE-2022-37706

CWE-ID: CWE-77

Exploitation vector: Local

Exploits in database: 6

• July 5, 2024
  • CVE-2022-37706 (The exploit is tested on Ubuntu 22.04) [Github]
• June 7, 2024
  • CVE-2022-37706 (Exploit created by nu11secur1ty (https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2022-37706)) [Github]
• April 26, 2023
  • CVE-2022-37706-LPE-exploit () [Github]
• October 4, 2022
  • Ubuntu Enlightenment Mount Priv Esc [Metasploit]
• September 23, 2022
  • CVE-2022-37706-LPE-exploit (A reliable exploit + write-up to elevate privileges to root. (Tested on Ubuntu 22.04)) [Github]
  • CVE-2022-37706 (All Credit to MaherAzzouzi (https://github.com/MaherAzzouzi/CVE-2022-37706-LPE-exploit). This is a copy of the exploit for CTFs) [Github]

Impact: Code execution

Vulnerable software:
Enlightenment
Client/Desktop applications / Other client software

Vendor: Enlightenment