CVE-2022-2126

HighCVSS 7.8/10Last modified Oct 8, 2026

Description

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Jun 19, 2022
Last modified
Oct 8, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-212606.1Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). Supported versions that are affected aCVE-2022-212616.1Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). Supported versions that are affected aCVE-2022-212626.1Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). Supported versions that are affected aCVE-2022-212634.8Vulnerability in the Oracle Solaris product of Oracle Systems (component: Fault Management Architecture). The supported version that is affeCVE-2022-212644.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.27 anCVE-2022-212653.8Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.27 anCVE-2022-212667.5Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: PipelineCVE-2022-212673.3Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: PipelineCVE-2022-212683.3Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: PipelineCVE-2022-212696.1Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versioCVE-2022-21275.9An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. When performing NTLM aCVE-2022-212704.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Federated). Supported versions that are affected are 5.7.36 an
CVE-2022-2126: High severity, CVSS 7.8 | Vulnix