CVE-2022-37002

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The SystemUI module has a privilege escalation vulnerability. Successful exploitation of this vulnerability can cause malicious applications to pop up windows or run in the background.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

No affected versions have been published.

Timeline

Published: Aug 10, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-370039.8The AOD module has a vulnerability in permission assignment. Successful exploitation of this vulnerability may cause permission escalation a CVE-2022-370047.5The Settings application has a vulnerability of bypassing the out-of-box experience (OOBE). Successful exploitation of this vulnerability ma CVE-2022-370057.5The Settings application has an argument injection vulnerability. Successful exploitation of this vulnerability may affect data confidential CVE-2022-370067.5Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service availability.CVE-2022-370077.5The chinadrm module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect the availability.CVE-2022-370087.5The recovery module has a vulnerability of bypassing the verification of an update package before use. Successful exploitation of this vulne CVE-2022-370097.8In JetBrains IntelliJ IDEA before 2022.2 local code execution via a Vagrant executable was possible CVE-2022-37017.8A privilege elevation vulnerability was reported in the Lenovo Vantage SystemUpdate plugin version 2.0.0.212 and earlier that could allow a CVE-2022-370103.3In JetBrains IntelliJ IDEA before 2022.2 email address validation in the "Git User Name Is Not Defined" dialog was missed CVE-2022-370119.8A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions < V1.17.0), Mendix SAML (Mendix 8 compatible) (All ve CVE-2022-370127.5This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation OPC UA C+CVE-2022-370137.5This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation OPC UA C+