Vulnerability in the Enlightenment user environment allowing root privileges
A vulnerability (CVE-2022-37706) has been discovered in the Enlightenment user environment, allowing a non-privileged local user to execute code with root privileges. This vulnerability is currently unpatched (0-day), but there is already an exploit available online, tested on Ubuntu 22.04. The issue exists in the enlightenment_sys executable, which is distributed with the suid root flag and executes certain permitted commands through the system() call, such as mounting storage […]
