CVE-2022-37706: Enlightenment

High severity, CVSS 7.8. EPSS: 5.7% chance of exploitation in the next 30 days.

enlightenment_sys in Enlightenment before 0.25.4 allows local users to gain privileges because it is setuid root, and the system library function mishandles pathnames that begin with a /dev/.. substring.

Affected products

• Enlightenment Enlightenment: before 0.25.4 (fixed in 0.25.4)

Published 2022-12-25. Last modified 2026-06-17.