CVE-2026-34714 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} injection occurs wi…
Critical CVSS: 9.2

CVE-2026-34714

Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} injection occurs with tabpanel lacking P_MLE.
Vendor
Vim
Product
Vim
CWE
CWE-78
Yayın Tarihi
2026-03-30 19:16:26
Güncelleme
2026-04-03 12:16:18
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-78 Vim CRITICAL Vim 2026

Referanslar

https://github.com/vim/vim/commit/664701eb7576edb7c7c7d9f2d600815ec1f43459 https://github.com/vim/vim/releases/tag/v9.2.0272 https://github.com/vim/vim/security/advisories/GHSA-2gmj-rpqf-pxvh https://www.openwall.com/lists/oss-security/2026/03/30/3 http://www.openwall.com/lists/oss-security/2026/04/02/4 http://www.openwall.com/lists/oss-security/2026/04/02/5 http://www.openwall.com/lists/oss-security/2026/04/03/6