CVE-2022-2845

Description

References

• vim/vim commit e98c88c · Patch
• huntr.dev/bounties/3e1d31ac-1cfd-4a9f-bc5c-213376b69445 · Exploit
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C72HDIMR3KTTAO7QGTXWUMPBNFUFIBRD
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWOJOA7PZZAMBI5GFTL6PWHXMWSDLUXL
• security.gentoo.org/glsa/202305-16 · Third Party Advisory

vim의 다른 취약점

• CVE-2026-73073높음 7.8Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers() in runtime/autoload/ccomplete.vim constructs and execute…
• CVE-2026-73078높음 8.8Vim is an open source, command line text editor. Prior to 9.2.0840, runtime/plugin/netrwPlugin.vim loads netrw and runtime/pack/dist/opt/net…
• CVE-2026-73077높음 7.8Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplu…
• CVE-2026-73076높음 7.8Vim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named .Vimb…
• CVE-2026-73075낮음 3.9Vim is an open source, command line text editor. From 9.2.0469 until 9.2.0843, popup_mark_opacity_zindex() in src/popupwin.c can use a negat…