CVE-2022-42919

score

<0.1

cvss

7.8

epss

0.8%

published

2022-11-07

kev added

—

first seen

2026-10-21

Python 3.9.x before 3.9.16 and 3.10.x before 3.10.9 on Linux contains a local privilege escalation caused by insecure pickle deserialization in the multiprocessing library when using the forkserver start method, letting local users execute arbitrary code, exploit requires the use of forkserver start method and deserialization of untrusted pickles.