CVE-2023-2609

MediumCVSS 5.5/10Last modified Jun 23, 2026

Description

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1531.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

No affected versions have been published.

Timeline

Published
May 9, 2023
Last modified
Jun 23, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-260916.1The frp_form_answers (aka Forms Export) extension before 3.1.2, and 4.x before 4.0.2, for TYPO3 allows XSS via saved emails.CVE-2023-260929.8Liima before 1.17.28 allows server-side template injection.CVE-2023-260939.8Liima before 1.17.28 allows Hibernate query language (HQL) injection, related to colToSort in the deployment filter.CVE-2023-260957.5ASQ in Stormshield Network Security (SNS) 4.3.15 before 4.3.16 and 4.6.x before 4.6.3 allows a crash when analysing a crafted SIP packet.CVE-2023-260975.5An issue was discovered in Telindus Apsal 3.14.2022.235 b. Unauthorized actions that could modify the application behaviour may not be blockCVE-2023-260987.8An issue was discovered in the Open Document feature in Telindus Apsal 3.14.2022.235 b. An attacker may upload a crafted file to execute arbCVE-2023-260997.1An issue was discovered in Telindus Apsal 3.14.2022.235 b. The consultation permission is insecure.CVE-2023-26107.8Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1532.CVE-2023-261006.1In Progress Flowmon before 12.2.0, an application endpoint failed to sanitize user-supplied input. A threat actor could leverage a reflectedCVE-2023-261017.5In Progress Flowmon Packet Investigator before 12.1.0, a Flowmon user with access to Flowmon Packet Investigator could leverage a path-traveCVE-2023-261028.2All versions of the package rangy are vulnerable to Prototype Pollution when using the extend() function in file rangy-core.js.The function CVE-2023-261037.5Versions of the package deno before 1.31.0 are vulnerable to Regular Expression Denial of Service (ReDoS) due to the upgradeWebSocket functi
CVE-2023-2609: Medium severity, CVSS 5.5 | Vulnix