Use After Free in GitHub repository vim/vim prior to 8.2.
Fix
Patch, vendor advisory and mitigation references on NVD 4
- https://github.com/vim/vim/commit/2813f38e021c6e6581c0c88fcf107e41788bc835 Patch, Third Party Advisory
- https://huntr.dev/bounties/8628b4cd-4055-4059-aed4-64f7fdc10eba Exploit, Patch, Third Party Advisory
- https://github.com/vim/vim/commit/2813f38e021c6e6581c0c88fcf107e41788bc835 Patch, Third Party Advisory
- https://huntr.dev/bounties/8628b4cd-4055-4059-aed4-64f7fdc10eba Exploit, Patch, Third Party Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.8 · vim, appleNVD modified 2026-10-08 22:17
Affected (CPE criteria) 2
cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
References 22
- http://seclists.org/fulldisclosure/2022/Oct/28 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Oct/41 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Oct/43 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Oct/45 Mailing List, Third Party Advisory
- https://github.com/vim/vim/commit/2813f38e021c6e6581c0c88fcf107e41788bc835 Patch, Third Party Advisory
- https://huntr.dev/bounties/8628b4cd-4055-4059-aed4-64f7fdc10eba Exploit, Patch, Third Party Advisory
- https://security.gentoo.org/glsa/202208-32 Third Party Advisory
- https://security.gentoo.org/glsa/202305-16
- https://support.apple.com/kb/HT213443 Third Party Advisory
- https://support.apple.com/kb/HT213444 Third Party Advisory
- https://support.apple.com/kb/HT213488 Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Oct/28 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Oct/41 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Oct/43 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Oct/45 Mailing List, Third Party Advisory
- https://github.com/vim/vim/commit/2813f38e021c6e6581c0c88fcf107e41788bc835 Patch, Third Party Advisory
- https://huntr.dev/bounties/8628b4cd-4055-4059-aed4-64f7fdc10eba Exploit, Patch, Third Party Advisory
- https://security.gentoo.org/glsa/202208-32 Third Party Advisory
- https://security.gentoo.org/glsa/202305-16
- https://support.apple.com/kb/HT213443 Third Party Advisory
- https://support.apple.com/kb/HT213444 Third Party Advisory
- https://support.apple.com/kb/HT213488 Third Party Advisory