CVE-2022-1616

概要

参考情報

• seclists.org/fulldisclosure/2022/Oct/28 · Mailing List
• seclists.org/fulldisclosure/2022/Oct/41 · Mailing List
• vim/vim commit d889344 · Patch
• huntr.dev/bounties/40f1d75f-fb2f-4281-b585-a41017f217e2 · Exploit
• lists.debian.org/debian-lts-announce/2022/05/msg00022.html · Mailing List
• lists.debian.org/debian-lts-announce/2022/11/msg00009.html · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6BY5P7ERZS7KXSBCGFCOXLMLGWUUJIH
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HIP7KG7TVS5YF3QREAY2GOGUT3YUBZAI
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JUN33257RUM4RS2I4GZETKFSAXPETATG
• security.gentoo.org/glsa/202208-32 · Third Party Advisory
• security.gentoo.org/glsa/202305-16
• support.apple.com/kb/HT213488 · Release Notes
• lists.debian.org/debian-lts-announce/2025/03/msg00023.html

vim のその他の脆弱性

• CVE-2026-73073高 7.8Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers() in runtime/autoload/ccomplete.vim constructs and execute…
• CVE-2026-73078高 8.8Vim is an open source, command line text editor. Prior to 9.2.0840, runtime/plugin/netrwPlugin.vim loads netrw and runtime/pack/dist/opt/net…
• CVE-2026-73077高 7.8Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplu…
• CVE-2026-73076高 7.8Vim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named .Vimb…
• CVE-2026-73075低 3.9Vim is an open source, command line text editor. From 9.2.0469 until 9.2.0843, popup_mark_opacity_zindex() in src/popupwin.c can use a negat…