CVE-2026-34714

概要

参考情報

• vim/vim commit 664701e · Patch
• vim/vim release v9.2.0272 · Release Notes
• vim/vim security advisory · Vendor Advisory
• openwall.com/lists/oss-security/2026/03/30/3 · Mailing List
• openwall.com/lists/oss-security/2026/04/02/4 · Issue Tracking
• openwall.com/lists/oss-security/2026/04/02/5 · Mailing List
• openwall.com/lists/oss-security/2026/04/03/6 · Mailing List
• access.redhat.com/security/cve/CVE-2026-34714
• bugzilla.redhat.com/show_bug.cgi
• security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34714.json

vim のその他の脆弱性

• CVE-2026-73073高 7.8Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers() in runtime/autoload/ccomplete.vim constructs and execute…
• CVE-2026-73078高 8.8Vim is an open source, command line text editor. Prior to 9.2.0840, runtime/plugin/netrwPlugin.vim loads netrw and runtime/pack/dist/opt/net…
• CVE-2026-73077高 7.8Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplu…
• CVE-2026-73076高 7.8Vim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named .Vimb…
• CVE-2026-73075低 3.9Vim is an open source, command line text editor. From 9.2.0469 until 9.2.0843, popup_mark_opacity_zindex() in src/popupwin.c can use a negat…