vim (SUSE:Manager Retail Branch Server 4.2) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Manager Retail Branch Server 4.2 package vim, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (7)

• CVE-2022-3520 — CVSS 9.8 (critical): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765.
• CVE-2022-3591 — CVSS 7.8 (high): Use After Free in GitHub repository vim/vim prior to 9.0.0789.
• CVE-2022-3491 — CVSS 7.8 (high): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0742.
• CVE-2022-4141 — CVSS 7.8 (high): Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the…
• CVE-2022-4292 — CVSS 7.8 (high): Use After Free in GitHub repository vim/vim prior to 9.0.0882.
• CVE-2022-4293 — CVSS 5.5 (medium): Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
• CVE-2022-3705 — CVSS 5.0 (medium): A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qf_update_buffer of the file…