CVE-2026-34714 in Vim
摘要 (英语)
Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} injection occurs with tabpanel lacking P_MLE.
负责
MITRE
预定
2026-03-30
披露
2026-03-30
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 354239 | Vim File 权限提升 | 78 | 未定义 | 官方修复 | CVE-2026-34714 |