CVE-2023-4750

HIGH EPSS 40.7%

Published Sep 4, 20232y ago · Modified Jun 23, 20261w ago

7.8 CVSS 3.1

High

Published Sep 4, 2023 2y ago

Last Modified Jun 23, 2026 1w ago

Description

Use After Free in GitHub repository vim/vim prior to 9.0.1857.

Base Score

7.8

Exploitability

1.8

Impact

5.9

Vector string

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector Local

Attack Complexity Low

Privileges Required None

User Interaction Required

Scope Unchanged

Confidentiality High

Integrity High

Availability High

EPSS Exploit Probability

40.7% percentile

Exploit & Patch Status

Public Exploit Known

Patch Available

CWE-416 Use After Free Memory Safety

Vendor	Product	Version	Range
vim	vim	*	<9.0.1857
fedoraproject	fedora	37	any
fedoraproject	fedora	38	any
fedoraproject	fedora	39	any
apple	macos	*	<14.1

seclists.org http://seclists.org/fulldisclosure/2023/Oct/24

Mailing ListThird Party Advisory
github.com https://github.com/vim/vim/commit/fc68299d436cf87453e432daa77b6d545df4d7ed

Patch
huntr.dev https://huntr.dev/bounties/1ab3ebdf-fe7d-4436-b483-9a586e03b0ea

ExploitPatchThird Party Advisory
lists.fedoraproject.org https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I56ITJAFMFAQ2G3BMGTCGM3GS62V2DTR/

Mailing List
lists.fedoraproject.org https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ITRVK4FB74RZDIGTZJXOZMUW6X6F4TNF/

Mailing List
lists.fedoraproject.org https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PFE3LDFRZ7EGWA5AU7YHYL62ELBOFZWQ/

Mailing List
support.apple.com https://support.apple.com/kb/HT213984

Release NotesThird Party Advisory

github.com https://github.com/vim/vim/commit/fc68299d436cf87453e432daa77b6d545df4d7ed

Patch
huntr.dev https://huntr.dev/bounties/1ab3ebdf-fe7d-4436-b483-9a586e03b0ea

ExploitPatchThird Party Advisory