Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2026-34714

Опубликовано: 02 апр. 2026
Источник: msrc
CVSS3: 9.2
EPSS Низкий

Описание

Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} injection occurs with tabpanel lacking P_MLE.

EPSS

Процентиль: 45%
0.00588
Низкий

9.2 Critical

CVSS3

Связанные уязвимости

CVSS3: 9.2
ubuntu
4 месяца назад

Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} injection occurs with tabpanel lacking P_MLE.

CVSS3: 8.6
redhat
4 месяца назад

Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} injection occurs with tabpanel lacking P_MLE.

CVSS3: 9.2
nvd
4 месяца назад

Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} injection occurs with tabpanel lacking P_MLE.

CVSS3: 9.2
debian
4 месяца назад

Vim before 9.2.0272 allows code execution that happens immediately upo ...

CVSS3: 9.2
github
4 месяца назад

Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} injection occurs with tabpanel lacking P_MLE.

EPSS

Процентиль: 45%
0.00588
Низкий

9.2 Critical

CVSS3