Количество 14
Количество 14
CVE-2026-73078
Vim is an open source, command line text editor. Prior to 9.2.0840, runtime/plugin/netrwPlugin.vim loads netrw and runtime/pack/dist/opt/netrw/autoload/netrw.vim constructs Bookmarks, History, and Targets menu entries by interpolating attacker-controlled directory paths into executed :menu commands. s:NetrwBookmarkMenu(), s:NetrwTgtMenu(), g:netrw_menu_escape, EX_TRLBAR, and netrw#MakeTgt() fail to neutralize the | command separator or single quotes at five construction sites, allowing a crafted path browsed or bookmarked in GUI Vim to execute arbitrary Ex and operating-system commands. This issue is fixed in version 9.2.0840.
CVE-2026-73078
Vim is an open source, command line text editor. Prior to 9.2.0840, runtime/plugin/netrwPlugin.vim loads netrw and runtime/pack/dist/opt/netrw/autoload/netrw.vim constructs Bookmarks, History, and Targets menu entries by interpolating attacker-controlled directory paths into executed :menu commands. s:NetrwBookmarkMenu(), s:NetrwTgtMenu(), g:netrw_menu_escape, EX_TRLBAR, and netrw#MakeTgt() fail to neutralize the | command separator or single quotes at five construction sites, allowing a crafted path browsed or bookmarked in GUI Vim to execute arbitrary Ex and operating-system commands. This issue is fixed in version 9.2.0840.
CVE-2026-73078
Vim is an open source, command line text editor. Prior to 9.2.0840, runtime/plugin/netrwPlugin.vim loads netrw and runtime/pack/dist/opt/netrw/autoload/netrw.vim constructs Bookmarks, History, and Targets menu entries by interpolating attacker-controlled directory paths into executed :menu commands. s:NetrwBookmarkMenu(), s:NetrwTgtMenu(), g:netrw_menu_escape, EX_TRLBAR, and netrw#MakeTgt() fail to neutralize the | command separator or single quotes at five construction sites, allowing a crafted path browsed or bookmarked in GUI Vim to execute arbitrary Ex and operating-system commands. This issue is fixed in version 9.2.0840.
CVE-2026-73078
Vim: Arbitrary Code Execution via Netrw Menu Construction
CVE-2026-73078
Vim is an open source, command line text editor. Prior to 9.2.0840, ru ...
ROS-20260908-80-0130
Уязвимость vim
ROS-20260908-73-0112
Уязвимость vim
RLSA-2026:66348
Important: vim security update
ELSA-2026-66348-0
ELSA-2026-66348-0: vim security update (IMPORTANT)
openSUSE-SU-2026:21671-1
Security update for vim
RLSA-2026:66366
Important: vim security update
RLSA-2026:66336
Important: vim security update
ELSA-2026-66366-0
ELSA-2026-66366-0: vim security update (IMPORTANT)
ELSA-2026-66336-0
ELSA-2026-66336-0: vim security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-73078 Vim is an open source, command line text editor. Prior to 9.2.0840, runtime/plugin/netrwPlugin.vim loads netrw and runtime/pack/dist/opt/netrw/autoload/netrw.vim constructs Bookmarks, History, and Targets menu entries by interpolating attacker-controlled directory paths into executed :menu commands. s:NetrwBookmarkMenu(), s:NetrwTgtMenu(), g:netrw_menu_escape, EX_TRLBAR, and netrw#MakeTgt() fail to neutralize the | command separator or single quotes at five construction sites, allowing a crafted path browsed or bookmarked in GUI Vim to execute arbitrary Ex and operating-system commands. This issue is fixed in version 9.2.0840. | 0% Низкий | около 1 месяца назад | |
 | CVE-2026-73078 Vim is an open source, command line text editor. Prior to 9.2.0840, runtime/plugin/netrwPlugin.vim loads netrw and runtime/pack/dist/opt/netrw/autoload/netrw.vim constructs Bookmarks, History, and Targets menu entries by interpolating attacker-controlled directory paths into executed :menu commands. s:NetrwBookmarkMenu(), s:NetrwTgtMenu(), g:netrw_menu_escape, EX_TRLBAR, and netrw#MakeTgt() fail to neutralize the | command separator or single quotes at five construction sites, allowing a crafted path browsed or bookmarked in GUI Vim to execute arbitrary Ex and operating-system commands. This issue is fixed in version 9.2.0840. | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад |
 | CVE-2026-73078 Vim is an open source, command line text editor. Prior to 9.2.0840, runtime/plugin/netrwPlugin.vim loads netrw and runtime/pack/dist/opt/netrw/autoload/netrw.vim constructs Bookmarks, History, and Targets menu entries by interpolating attacker-controlled directory paths into executed :menu commands. s:NetrwBookmarkMenu(), s:NetrwTgtMenu(), g:netrw_menu_escape, EX_TRLBAR, and netrw#MakeTgt() fail to neutralize the | command separator or single quotes at five construction sites, allowing a crafted path browsed or bookmarked in GUI Vim to execute arbitrary Ex and operating-system commands. This issue is fixed in version 9.2.0840. | 0% Низкий | около 1 месяца назад | |
 | CVE-2026-73078 Vim: Arbitrary Code Execution via Netrw Menu Construction | 0% Низкий | около 1 месяца назад | |
| CVE-2026-73078 Vim is an open source, command line text editor. Prior to 9.2.0840, ru ... | 0% Низкий | около 1 месяца назад | |
 | ROS-20260908-80-0130 Уязвимость vim | CVSS3: 8.8 | 0% Низкий | 10 дней назад |
| ROS-20260908-73-0112 Уязвимость vim | CVSS3: 8.8 | 0% Низкий | 10 дней назад |
 | RLSA-2026:66348 Important: vim security update | 7 дней назад | ||
| ELSA-2026-66348-0 ELSA-2026-66348-0: vim security update (IMPORTANT) | 8 дней назад | ||
 | openSUSE-SU-2026:21671-1 Security update for vim | 21 день назад | ||
| RLSA-2026:66366 Important: vim security update | 6 дней назад | ||
| RLSA-2026:66336 Important: vim security update | 6 дней назад | ||
| ELSA-2026-66366-0 ELSA-2026-66366-0: vim security update (IMPORTANT) | 8 дней назад | ||
| ELSA-2026-66336-0 ELSA-2026-66336-0: vim security update (IMPORTANT) | 8 дней назад |
Уязвимостей на страницу