CVE-2022-2345

HighCVSS 7.8/10Last modified Oct 8, 2026

Description

Use After Free in GitHub repository vim/vim prior to 9.0.0046.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Jul 8, 2022
Last modified
Oct 8, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-234509.8A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versionsCVE-2022-234518.1An authorization flaw was found in openstack-barbican. The default policy rules for the secret metadata API allowed any authenticated user tCVE-2022-234524.9An authorization flaw was found in openstack-barbican, where anyone with an admin role could add secrets to a different project container. TCVE-2022-234537.8Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromCVE-2022-234547.8Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromCVE-2022-234557.8Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromCVE-2022-234565.5Potential arbitrary file deletion vulnerability has been identified in HP Support Assistant software.CVE-2022-234579.8ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library. Prior to version 2.3.0.0, the deCVE-2022-234586.1Toast UI Grid is a component to display and edit data. Versions prior to 4.21.3 are vulnerable to cross-site scripting attacks when pasting CVE-2022-234599.8Jsonxx or Json++ is a JSON parser, writer and reader written in C++. In affected versions of jsonxx use of the Value class may lead to memorCVE-2022-23464.3In affected versions of Octopus Deploy it is possible for a low privileged guest user to interact with extension endpoints.CVE-2022-234607.5Jsonxx or Json++ is a JSON parser, writer and reader written in C++. In affected versions of jsonxx json parsing may lead to stack exhaustio
CVE-2022-2345: High severity, CVSS 7.8 | Vulnix