Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 14

Количество 14

ubuntu логотип

CVE-2026-73076

около 1 месяца назад

Vim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named .VimballRecord to overwrite the installation record with attacker-chosen commands. When vimball#RmVimball() later processes the matching record entry, the stored Ex commands, including operating-system commands invoked through :!, execute with the privileges of the user running Vim. This issue is fixed in version 9.2.0847.

EPSS: Низкий
redhat логотип

CVE-2026-73076

около 1 месяца назад

Vim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named .VimballRecord to overwrite the installation record with attacker-chosen commands. When vimball#RmVimball() later processes the matching record entry, the stored Ex commands, including operating-system commands invoked through :!, execute with the privileges of the user running Vim. This issue is fixed in version 9.2.0847.

CVSS3: 7.3
EPSS: Низкий
nvd логотип

CVE-2026-73076

около 1 месяца назад

Vim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named .VimballRecord to overwrite the installation record with attacker-chosen commands. When vimball#RmVimball() later processes the matching record entry, the stored Ex commands, including operating-system commands invoked through :!, execute with the privileges of the user running Vim. This issue is fixed in version 9.2.0847.

EPSS: Низкий
msrc логотип

CVE-2026-73076

около 1 месяца назад

Vim: Arbitrary Command Execution via Malicious `.VimballRecord` Entry Replay in `vimball.vim`

EPSS: Низкий
debian логотип

CVE-2026-73076

около 1 месяца назад

Vim is an open source, command line text editor. Prior to 9.2.0847, ru ...

EPSS: Низкий
redos логотип

ROS-20260908-80-0132

10 дней назад

Уязвимость vim

CVSS3: 7.8
EPSS: Низкий
redos логотип

ROS-20260908-73-0114

10 дней назад

Уязвимость vim

CVSS3: 7.8
EPSS: Низкий
rocky логотип

RLSA-2026:66348

7 дней назад

Important: vim security update

EPSS: Низкий
oracle-oval логотип

ELSA-2026-66348-0

8 дней назад

ELSA-2026-66348-0: vim security update (IMPORTANT)

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2026:21671-1

21 день назад

Security update for vim

EPSS: Низкий
rocky логотип

RLSA-2026:66366

6 дней назад

Important: vim security update

EPSS: Низкий
rocky логотип

RLSA-2026:66336

6 дней назад

Important: vim security update

EPSS: Низкий
oracle-oval логотип

ELSA-2026-66366-0

8 дней назад

ELSA-2026-66366-0: vim security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2026-66336-0

8 дней назад

ELSA-2026-66336-0: vim security update (IMPORTANT)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2026-73076

Vim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named .VimballRecord to overwrite the installation record with attacker-chosen commands. When vimball#RmVimball() later processes the matching record entry, the stored Ex commands, including operating-system commands invoked through :!, execute with the privileges of the user running Vim. This issue is fixed in version 9.2.0847.

0%
Низкий
около 1 месяца назад
redhat логотип
CVE-2026-73076

Vim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named .VimballRecord to overwrite the installation record with attacker-chosen commands. When vimball#RmVimball() later processes the matching record entry, the stored Ex commands, including operating-system commands invoked through :!, execute with the privileges of the user running Vim. This issue is fixed in version 9.2.0847.

CVSS3: 7.3
0%
Низкий
около 1 месяца назад
nvd логотип
CVE-2026-73076

Vim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named .VimballRecord to overwrite the installation record with attacker-chosen commands. When vimball#RmVimball() later processes the matching record entry, the stored Ex commands, including operating-system commands invoked through :!, execute with the privileges of the user running Vim. This issue is fixed in version 9.2.0847.

0%
Низкий
около 1 месяца назад
msrc логотип
CVE-2026-73076

Vim: Arbitrary Command Execution via Malicious `.VimballRecord` Entry Replay in `vimball.vim`

0%
Низкий
около 1 месяца назад
debian логотип
CVE-2026-73076

Vim is an open source, command line text editor. Prior to 9.2.0847, ru ...

0%
Низкий
около 1 месяца назад
redos логотип
ROS-20260908-80-0132

Уязвимость vim

CVSS3: 7.8
0%
Низкий
10 дней назад
redos логотип
ROS-20260908-73-0114

Уязвимость vim

CVSS3: 7.8
0%
Низкий
10 дней назад
rocky логотип
RLSA-2026:66348

Important: vim security update

7 дней назад
oracle-oval логотип
ELSA-2026-66348-0

ELSA-2026-66348-0: vim security update (IMPORTANT)

8 дней назад
suse-cvrf логотип
openSUSE-SU-2026:21671-1

Security update for vim

21 день назад
rocky логотип
RLSA-2026:66366

Important: vim security update

6 дней назад
rocky логотип
RLSA-2026:66336

Important: vim security update

6 дней назад
oracle-oval логотип
ELSA-2026-66366-0

ELSA-2026-66366-0: vim security update (IMPORTANT)

8 дней назад
oracle-oval логотип
ELSA-2026-66336-0

ELSA-2026-66336-0: vim security update (IMPORTANT)

8 дней назад

Уязвимостей на страницу