CVE-2026-73078highCWE-184CWE-77

CVE-2026-73078: falha de alta gravidade em vim

Vim: Arbitrary Code Execution via Netrw Menu Construction

Publicada em

Seguir esta CVE+ Monitorar vim+ Monitorar vim

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.6epss 0.3%
Vim is an open source, command line text editor. Prior to 9.2.0840, runtime/plugin/netrwPlugin.vim loads netrw and runtime/pack/dist/opt/netrw/autoload/netrw.vim constructs Bookmarks, History, and Targets menu entries by interpolating attacker-controlled directory paths into executed :menu commands. s:NetrwBookmarkMenu(), s:NetrwTgtMenu(), g:netrw_menu_escape, EX_TRLBAR, and netrw#MakeTgt() fail to neutralize the | command separator or single quotes at five construction sites, allowing a crafted path browsed or bookmarked in GUI Vim to execute arbitrary Ex and operating-system commands. This issue is fixed in version 9.2.0840.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
vim · vim
CVEs relacionadas — vim

No mesmo produto, das mais perigosas para as menos.

CVE-2025-27423HIGHImproper Input Validation in VimEPSS 22.5%CVE-2026-28417MEDIUMVim has OS Command Injection in netrwEPSS 1.4%CVE-2026-44656MEDIUMVim: OS Command Injection via 'path' completionEPSS 0.9%CVE-2025-53906MEDIUMVim has path traversal issue with zip.vim and special crafted zip archivesEPSS 0.9%CVE-2026-33412MEDIUMVim affected by Command injection via newline in glob()EPSS 0.9%CVE-2026-42307MEDIUMVim: OS Command Injection in netrwEPSS 0.8%