{"vulnerability": "CVE-2022-0995", "sightings": [{"uuid": "5825c46d-c5b8-46fc-8513-f7df9f04cdf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:01.000000Z"}, {"uuid": "ddd4c5e2-382e-4c7b-8cbe-3191412cc448", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:45.000000Z"}, {"uuid": "7740936b-e925-4d9e-a497-baeb0de96e5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:42.000000Z"}, {"uuid": "b1f0c4d7-80dd-4a34-bb52-35236389f880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb", "content": "", "creation_timestamp": "2022-04-21T16:42:05.000000Z"}, {"uuid": "3ac5f376-1e85-4c33-a01e-71c31ebd2604", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/1724", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-0995 exploit\nURL\uff1ahttps://github.com/Bonfee/CVE-2022-0995\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-03-27T09:13:01.000000Z"}, {"uuid": "7d694fc3-e7c6-4142-9ca5-9674d357cba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2022-0995", "type": "seen", "source": "https://infosec.exchange/users/quarkslab/statuses/116211295316386323", "content": "", "creation_timestamp": "2026-03-11T15:40:56.224095Z"}, {"uuid": "a0fd94f5-e4fc-42d9-9ab9-a53cf3a07f19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "published-proof-of-concept", "source": "https://t.me/reconshell/1230", "content": "CVE-2022-0995 exploit for Ubuntu\n\n#CVE-2022-0995 #Ubuntu #Exploit #Linux #RootExploit\n#Hacking #Bugbounty #PrivilegeEscalation #Malware\n\nhttps://reconshell.com/cve-2022-0995-exploit-for-ubuntu/", "creation_timestamp": "2022-03-29T10:40:47.000000Z"}, {"uuid": "5322f0df-d572-4897-9892-088d799b96b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "published-proof-of-concept", "source": "https://t.me/poxek/1172", "content": "CVE-2022-0995 exploit for Ubuntu\n\u25b6\ufe0f \u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1", "creation_timestamp": "2022-03-29T17:38:09.000000Z"}, {"uuid": "def459cf-fbf2-4c42-91aa-0140b3b161a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "seen", "source": "Telegram/TXmZ8EBGvdc4uufvEqu6hfgyjEc7K_gjD1Jpp8Uzvu6-KK0", "content": "", "creation_timestamp": "2023-03-23T09:18:19.000000Z"}, {"uuid": "2c76e5bc-aad4-48cb-9abb-1289d7b8dab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/1427", "content": "kernel-linux-factory\n*\n\u0423\u0434\u043e\u0431\u043d\u043e \u0442\u0435\u043c, \u0447\u0442\u043e \u043d\u0435 \u043d\u0443\u0436\u043d\u043e \u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u043b\u0438 \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0442\u044c \u0441\u0440\u0435\u0434\u0443, \u0433\u043b\u044f\u043d\u0443\u043b \u043a\u0430\u043a\u043e\u0435 \u044f\u0434\u0440\u043e, \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043b \u0441\u043f\u043b\u043e\u0435\u0442, \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u043f\u043e \u043c\u043e\u0440\u0434\u0435 #root\n*\n\u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 exploits \u0434\u043b\u044f:\nCVE-2016-9793\n4-20-BPF-integer\nCVE-2017-5123\nCVE-2017-6074\nCVE-2017-7308\nCVE-2017-8890\nCVE-2017-11176\nCVE-2017-16995\nCVE-2017-1000112\nCVE-2018-5333\nCVE-2019-9213 & CVE-2019-8956\nCVE-2019-15666\nCVE-2020-8835\nCVE-2020-27194\nCVE-2021-3156\nCVE-2021-31440\nCVE-2021-3490\nCVE-2021-22555\nCVE-2021-41073\nCVE-2021-4154\nCVE-2021-42008\nCVE-2021-43267\nCVE-2022-0185\nCVE-2022-0847\nCVE-2022-0995\nCVE-2022-1015\nCVE-2022-2588\nCVE-2022-2639\nCVE-2022-25636\nCVE-2022-27666\nCVE-2022-32250\nCVE-2022-34918\n\ndownload\n\n#linux #exploits #kernel", "creation_timestamp": "2023-03-23T06:30:43.000000Z"}, {"uuid": "3291719d-9dc1-41ce-a125-72023702e9ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "published-proof-of-concept", "source": "https://t.me/YAH_Channel/518", "content": "\u0421\u0432\u0435\u0436\u0435\u043d\u044c\u043a\u0438\u0439 LPE \u0432 Linux: CVE-2022-0995 \u0447\u0435\u0440\u0435\u0437 heap out-of-bounds write.\n\n\u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442: https://github.com/Bonfee/CVE-2022-0995", "creation_timestamp": "2022-03-29T06:57:49.000000Z"}, {"uuid": "10c75461-0c80-445d-aed3-466b0fee01bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/5706", "content": "#exploit\n1. CVE-2022-0995:\nHeap out-of-bounds write in the watch_queue Linux kernel component\nhttps://github.com/Bonfee/CVE-2022-0995\n\n2. Script for 2FA bypass that replay Citrix credentials\nhttps://github.com/post-cyberlabs/Offensive_tools/tree/main/Citrix\n\n3. ABC-Code Execution for Veeam (CVE-2022-26503 LPE)\nhttps://www.mdsec.co.uk/2022/03/abc-code-execution-for-veeam", "creation_timestamp": "2022-03-30T11:03:01.000000Z"}, {"uuid": "8d5ec13a-7fc7-410b-945b-32e2dc087df8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "published-proof-of-concept", "source": "Telegram/ej7ZJDIGxurOkztgDxwGfL9KgrhSDL1dIKsKq1X6lhRCbpo", "content": "", "creation_timestamp": "2022-03-29T17:28:42.000000Z"}, {"uuid": "851bf71b-6e2c-4962-8d2c-26cf436f3640", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "published-proof-of-concept", "source": "https://t.me/reverse_dungeon/1530", "content": "\u0421\u0432\u0435\u0436\u0435\u043d\u044c\u043a\u0438\u0439 LPE \u0432 Linux: CVE-2022-0995 \u0447\u0435\u0440\u0435\u0437 heap out-of-bounds write.\n\n\u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442: https://github.com/Bonfee/CVE-2022-0995", "creation_timestamp": "2022-03-28T10:29:32.000000Z"}, {"uuid": "4b08ed59-6efc-4297-bae9-f4466c39811c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "seen", "source": "https://t.me/BlueRedTeam/1965", "content": "#exploit\n+ bluez: malicious USB devices can steal Bluetooth link keys over HCI using fake BD_ADDR, plus bluetoothd double-free\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2256\n\n+ CVE-2022-0995:\nLinux: watch_queue filter OOB write (and other bugs)\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2274\n\n@BlueRedTeam", "creation_timestamp": "2022-04-21T08:34:01.000000Z"}, {"uuid": "58acb456-4faf-4b30-98b5-c2e78096fa7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "published-proof-of-concept", "source": "https://t.me/BlueRedTeam/1845", "content": "#CVE-2022\nCVE-2022-0995 exploit\nhttps://github.com/Bonfee/CVE-2022-0995\n\n@BlueRedTeam", "creation_timestamp": "2022-03-28T09:40:45.000000Z"}, {"uuid": "677df61f-0f21-4294-996a-090ee6947738", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/5854", "content": "#exploit\n1. bluez: malicious USB devices can steal Bluetooth link keys over HCI using fake BD_ADDR, plus bluetoothd double-free\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2256\n\n2. CVE-2022-0995:\nLinux: watch_queue filter OOB write (and other bugs)\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2274", "creation_timestamp": "2022-04-21T11:07:01.000000Z"}, {"uuid": "8fe298ad-2fdf-4d09-8595-3a182f2a0151", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "seen", "source": "Telegram/EWYW-JRR6Ao35LuisrucjGoi7XP5jTbQUklI3Clj4ygTs-s", "content": "", "creation_timestamp": "2022-03-30T02:13:01.000000Z"}]}