CVE-2022-37009

HighCVSS 7.8/10Last modified Oct 2, 2026

Description

In JetBrains IntelliJ IDEA before 2022.2 local code execution via a Vagrant executable was possible

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-94

Affected software

VendorProductVersions
JetBrainsIntelliJ IDEA>= 2022.2, < 2022.2

References

Timeline

Published
Jul 28, 2022
Last modified
Oct 2, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-37017.8A privilege elevation vulnerability was reported in the Lenovo Vantage SystemUpdate plugin version 2.0.0.212 and earlier that could allow a CVE-2022-370103.3In JetBrains IntelliJ IDEA before 2022.2 email address validation in the "Git User Name Is Not Defined" dialog was missedCVE-2022-370119.8A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions < V1.17.0), Mendix SAML (Mendix 8 compatible) (All veCVE-2022-370127.5This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation OPC UA C+CVE-2022-370137.5This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation OPC UA C+CVE-2022-370159.8Symantec Endpoint Detection and Response (SEDR) Appliance, prior to 4.7.0, may be susceptible to a privilege escalation vulnerability, whichCVE-2022-370169.8Symantec Endpoint Protection (Windows) agent may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby anCVE-2022-370177.5Symantec Endpoint Protection (Windows) agent, prior to 14.3 RU6/14.3 RU5 Patch 1, may be susceptible to a Security Control Bypass vulnerabilCVE-2022-370188.4A potential vulnerability has been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and codCVE-2022-370196.8Potential vulnerabilities have been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and coCVE-2022-37027.1A denial of service vulnerability was reported in Lenovo Vantage HardwareScan Plugin version 1.3.0.5 and earlier that could allow a local atCVE-2022-370206.8Potential vulnerabilities have been identified in the system BIOS for certain HP PC products, which might allow escalation of privileges and
CVE-2022-37009: High severity, CVSS 7.8 | Vulnix