CVE-2022-41138

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

In Zutty before 0.13, DECRQSS in text written to the terminal can achieve arbitrary code execution.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-94

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Sep 20, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-411395.4MITRE CALDERA 4.1.0 allows stored XSS via app.contact.gist (aka the gist contact configuration field), leading to execution of arbitrary comCVE-2022-41145.4The Superio WordPress theme does not sanitise and escape some parameters, which could allow users with a role as low as a subscriber to perfCVE-2022-411408.8This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of multiple D-Link routers. AuthentCVE-2022-411417.8This vulnerability allows local attackers to escalate privileges on affected installations of Windscribe. An attacker must first obtain the CVE-2022-411428.8This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploCVE-2022-411437.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is reCVE-2022-411447.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is reCVE-2022-411455.5This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interactiCVE-2022-411465.5This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interactiCVE-2022-411477.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is reCVE-2022-411487.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is reCVE-2022-411497.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is re
CVE-2022-41138: Critical severity, CVSS 9.8 | Vulnix