CVE-2023-5535

HIGH

Vim < 9.0.2010 - Use After Free

Title source: rule

Use After Free in GitHub repository vim/vim prior to v9.0.2010.

Core 5

Core References

Patch

Exploit, Patch, Third Party Advisory

Mailing List, Third Party Advisory

Mailing List, Third Party Advisory

Mailing List, Third Party Advisory

CVSS v3 7.8

EPSS 0.0003

EPSS Percentile 8.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Vulnrichment

Exploitation poc

Automatable no

Technical Impact total

CWE

CWE-416

Status published

Products (4)

fedoraproject/fedora 37

fedoraproject/fedora 38

fedoraproject/fedora 39

vim/vim < 9.0.2010

Published Oct 11, 2023

Tracked Since Feb 18, 2026