CVE-2011-2922: Ktsuss Project Ktsuss

High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days.

ktsuss versions 1.4 and prior spawns the GTK interface to run as root. This can allow a local attacker to escalate privileges to root and use the "GTK_MODULES" environment variable to possibly execute arbitrary code.

Affected products

• Ktsuss Project Ktsuss: up to and including 1.4

Published 2019-11-19. Last modified 2026-06-16.