Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2026-33412

Опубликовано: 26 мар. 2026
Источник: msrc
CVSS3: 5.6
EPSS Низкий

Описание

Vim affected by Command injection via newline in glob()

EPSS

Процентиль: 54%
0.00834
Низкий

5.6 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.6
ubuntu
4 месяца назад

Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob() function on Unix-like systems. By including a newline character (\n) in a pattern passed to glob(), an attacker may be able to execute arbitrary shell commands. This vulnerability depends on the user's 'shell' setting. This issue has been patched in version 9.2.0202.

CVSS3: 7.3
redhat
4 месяца назад

Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob() function on Unix-like systems. By including a newline character (\n) in a pattern passed to glob(), an attacker may be able to execute arbitrary shell commands. This vulnerability depends on the user's 'shell' setting. This issue has been patched in version 9.2.0202.

CVSS3: 5.6
nvd
4 месяца назад

Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob() function on Unix-like systems. By including a newline character (\n) in a pattern passed to glob(), an attacker may be able to execute arbitrary shell commands. This vulnerability depends on the user's 'shell' setting. This issue has been patched in version 9.2.0202.

CVSS3: 5.6
debian
4 месяца назад

Vim is an open source, command line text editor. Prior to version 9.2. ...

CVSS3: 7.3
redos
2 месяца назад

Уязвимость vim

EPSS

Процентиль: 54%
0.00834
Низкий

5.6 Medium

CVSS3