Количество 12
Количество 12
CVE-2026-73077
Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual-mode selections from K through keywordprg commands without safely separating shell arguments. fnameescape() and PATH_ESC_CHARS do not neutralize shell metacharacters before ShKeywordPrg, ZshKeywordPrg, or GetHelp invokes bash, zsh, or PowerShell, allowing arbitrary operating-system commands to execute with the privileges of the user running Vim. This issue is fixed in version 9.2.0839.
CVE-2026-73077
Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual-mode selections from K through keywordprg commands without safely separating shell arguments. fnameescape() and PATH_ESC_CHARS do not neutralize shell metacharacters before ShKeywordPrg, ZshKeywordPrg, or GetHelp invokes bash, zsh, or PowerShell, allowing arbitrary operating-system commands to execute with the privileges of the user running Vim. This issue is fixed in version 9.2.0839.
CVE-2026-73077
Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual-mode selections from K through keywordprg commands without safely separating shell arguments. fnameescape() and PATH_ESC_CHARS do not neutralize shell metacharacters before ShKeywordPrg, ZshKeywordPrg, or GetHelp invokes bash, zsh, or PowerShell, allowing arbitrary operating-system commands to execute with the privileges of the user running Vim. This issue is fixed in version 9.2.0839.
CVE-2026-73077
Vim: Arbitrary Code Execution via Shell Keyword Lookup
CVE-2026-73077
Vim is an open source, command line text editor. Prior to 9.2.0839, th ...
ROS-20260908-80-0131
Уязвимость vim
ROS-20260908-73-0113
Уязвимость vim
openSUSE-SU-2026:21671-1
Security update for vim
RLSA-2026:66366
Important: vim security update
RLSA-2026:66336
Important: vim security update
ELSA-2026-66366-0
ELSA-2026-66366-0: vim security update (IMPORTANT)
ELSA-2026-66336-0
ELSA-2026-66336-0: vim security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-73077 Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual-mode selections from K through keywordprg commands without safely separating shell arguments. fnameescape() and PATH_ESC_CHARS do not neutralize shell metacharacters before ShKeywordPrg, ZshKeywordPrg, or GetHelp invokes bash, zsh, or PowerShell, allowing arbitrary operating-system commands to execute with the privileges of the user running Vim. This issue is fixed in version 9.2.0839. | 0% Низкий | около 1 месяца назад | |
 | CVE-2026-73077 Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual-mode selections from K through keywordprg commands without safely separating shell arguments. fnameescape() and PATH_ESC_CHARS do not neutralize shell metacharacters before ShKeywordPrg, ZshKeywordPrg, or GetHelp invokes bash, zsh, or PowerShell, allowing arbitrary operating-system commands to execute with the privileges of the user running Vim. This issue is fixed in version 9.2.0839. | CVSS3: 7.3 | 0% Низкий | около 1 месяца назад |
 | CVE-2026-73077 Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual-mode selections from K through keywordprg commands without safely separating shell arguments. fnameescape() and PATH_ESC_CHARS do not neutralize shell metacharacters before ShKeywordPrg, ZshKeywordPrg, or GetHelp invokes bash, zsh, or PowerShell, allowing arbitrary operating-system commands to execute with the privileges of the user running Vim. This issue is fixed in version 9.2.0839. | 0% Низкий | около 1 месяца назад | |
 | CVE-2026-73077 Vim: Arbitrary Code Execution via Shell Keyword Lookup | 0% Низкий | 25 дней назад | |
| CVE-2026-73077 Vim is an open source, command line text editor. Prior to 9.2.0839, th ... | 0% Низкий | около 1 месяца назад | |
 | ROS-20260908-80-0131 Уязвимость vim | CVSS3: 7.8 | 0% Низкий | 10 дней назад |
| ROS-20260908-73-0113 Уязвимость vim | CVSS3: 7.8 | 0% Низкий | 10 дней назад |
 | openSUSE-SU-2026:21671-1 Security update for vim | 21 день назад | ||
 | RLSA-2026:66366 Important: vim security update | 6 дней назад | ||
| RLSA-2026:66336 Important: vim security update | 6 дней назад | ||
| ELSA-2026-66366-0 ELSA-2026-66366-0: vim security update (IMPORTANT) | 8 дней назад | ||
| ELSA-2026-66336-0 ELSA-2026-66336-0: vim security update (IMPORTANT) | 8 дней назад |
Уязвимостей на страницу