CVE-2022-23220: Usbview Project Usbview

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

USBView 2.1 before 2.2 allows some local users (e.g., ones logged in via SSH) to execute arbitrary code as root because certain Polkit settings (e.g., allow_any=yes) for pkexec disable the authentication requirement. Code execution can, for example, use the --gtk-module option. This affects Ubuntu, Debian, and Gentoo.

Affected products

• Usbview Project Usbview: before 2.2 (fixed in 2.2)

Published 2022-01-21. Last modified 2026-06-17.