What is the CVSS score of CVE-2022-1736?

CVE-2022-1736 has a contested CVSS base score of 9.8 from a third party (e.g. CISA-ADP), while the vendor rates it Critical. vuln.today uses the vendor rating as authoritative.

Which versions of Ubuntu are affected by CVE-2022-1736?

CVE-2022-1736 presents critical security risk rated CVSS 9.8. Successful exploitation could critically impact the confidentiality, integrity, and availability of affected systems.. A patch is available.

How to fix or mitigate CVE-2022-1736?

Within 7 days: Identify all affected systems and apply vendor patches promptly. Monitor vendor channels for patch availability.

Ubuntu CVE-2022-1736

CRITICAL

2025-01-31 security@ubuntu.com

Information Disclosure Ubuntu Gnome Remote Desktop Ubuntu Linux Red Hat Suse

Critical

Disputed · 9.8 NVD

Severity by source

Sources disagree (Low–Critical)

NVD PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SUSE

CRITICAL

qualitative

Red Hat

4.3 LOW

qualitative

vuln.today treats the vendor’s rating as authoritative. A higher third-party CVSS (e.g. CISA-ADP) is shown for transparency but does not drive the headline severity.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch released

Apr 01, 2026 - 08:30 nvd

Patch available

Analysis Generated

Mar 28, 2026 - 18:06 vuln.today

CVE Published

Jan 31, 2025 - 02:15 nvd

CRITICAL 9.8

DescriptionCVE.org

Ubuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by default.

AnalysisAI

Ubuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by default. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Technical ContextAI

Ubuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by default. Affected products include: Gnome Gnome-Remote-Desktop, Canonical Ubuntu Linux.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

Vendor StatusVendor

SUSE

Severity: Critical

Product	Status
openSUSE Tumbleweed	Fixed
SUSE Linux Enterprise High Performance Computing 12 SP5	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP3	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS	Fixed

CVE-2022-1736 vulnerability details – vuln.today

Back

Ubuntu CVE-2022-1736

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

Same technique Information Disclosure

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code