5.6
Moyenne
CVE-2026-33412 Vim is an open source, command line text editor
Description
Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob() function on Unix-like systems. By including a newline character (\n) in a pattern passed to glob(), an attacker may be able to execute arbitrary shell commands. This vulnerability depends on the user's 'shell' setting. This issue has been patched in version 9.2.0202.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION) | Versions non publiées | |
| Red Hat Enterprise Linux Server (v. 7 ELS) | Versions non publiées | |
| Red Hat OpenShift Container Platform 4.12 412.86 | premières → < 412.86.202604281506-0 | 412.86.202604281506-0 |
| Red Hat OpenShift Container Platform 4.13 413.92 | premières → < 413.92.202604080111-0 | 413.92.202604080111-0 |
| Red Hat OpenShift Container Platform 4.14 414.92 | premières → < 414.92.202605060243-0 | 414.92.202605060243-0 |
| Red Hat OpenShift Container Platform 4.15 415.92 | premières → < 415.92.202605060220-0 | 415.92.202605060220-0 |
| Red Hat OpenShift Container Platform 4.16 416.94 | premières → < 416.94.202604211449-0 | 416.94.202604211449-0 |
| Red Hat OpenShift Container Platform 4.17 417.94 | premières → < 417.94.202605112123-0 | 417.94.202605112123-0 |
| Red Hat OpenShift Container Platform 4.18 418.94 | premières → < 418.94.202604140044-0 | 418.94.202604140044-0 |
Afficher les 56 autres branches Masquer les 56 autres branches
Références
- github.com github.com
- github.com github.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)
Les 14 CVE de Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION) →
CVE-2026-46243
In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego…
7.1
Élevée
CVE-2026-43037
In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Oskar…
9.8
Critique
CVE-2026-34003
Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access
7.8
Élevée
CVE-2026-34001
Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption
7.8
Élevée