CVE-2022-2862

HighCVSS 7.8/10Last modified Nov 2, 2026

Description

Use After Free in GitHub repository vim/vim prior to 9.0.0221.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
vimvim/vim>= unspecified, < 9.0.0221

References

Timeline

Published
Aug 17, 2022
Last modified
Nov 2, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-286209.8A remote authentication bypass vulnerability was discovered in HPE Cray Legacy Shasta System Solutions; HPE Slingshot; and HPE Cray EX superCVE-2022-286217.5A remote disclosure of sensitive information vulnerability was discovered in HPE NonStop DSM/SCM version: T6031H03^ADP. HPE has provided a sCVE-2022-286227.5A potential security vulnerability has been identified in HPE StoreOnce Software. The SSH server supports weak key exchange algorithms whichCVE-2022-286239.8Security vulnerabilities in HPE IceWall SSO 10.0 certd could be exploited remotely to allow SQL injection or unauthorized data injection. HPCVE-2022-286244.8A potential security vulnerability has been identified in certain HPE FlexNetwork and FlexFabric switch products. The vulnerability could beCVE-2022-286255.5A local disclosure of sensitive information vulnerability was discovered in HPE OneView version(s): Prior to 7.0 or 6.60.01. A low privilegeCVE-2022-286266.7A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. A hCVE-2022-286278.4A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An CVE-2022-286288.4A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An CVE-2022-286297.8A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. A lCVE-2022-28634.9The Migration, Backup, Staging WordPress plugin before 0.9.76 does not sanitise and validate a parameter before using it to read the contentCVE-2022-286307.3A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An
CVE-2022-2862: High severity, CVSS 7.8 | Vulnix