VDB
CVE-2026-35177
CVE-2026-35177
PUBLISHED
CVSS 4.099999904632568 MEDIUM
Vim is an open source, command line text editor. Prior to 9.2.0280, a path traversal bypass in Vim's zip.vim plugin allows overwriting of arbitrary files when opening specially crafted zip archives, circumventing the previous fix for CVE-2025-53906. This vulnerability is fixed in 9.2.0280.
EPSS 0.02% · 4.0th percentile
Risk Scores
CVSS 3.1
4.099999904632568
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:L
EPSS Score
0.02%
4.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| vim | vim | < 9.2.0280 |
Exploit Intelligence
Timeline
- Apr 6, 2026 CVE Published
- Apr 7, 2026 CVE Updated
- Apr 28, 2026 Security Advisory
- Apr 28, 2026 Security Advisory
- Apr 28, 2026 Security Advisory
- Apr 28, 2026 Security Advisory
- Apr 28, 2026 Security Advisory
- Apr 28, 2026 Security Advisory
- Apr 28, 2026 Security Advisory
- Apr 28, 2026 Security Advisory
- Apr 28, 2026 Security Advisory
- Apr 28, 2026 Security Advisory
References
- https://github.com/vim/vim/security/advisories/GHSA-jc86-w7vm-8p24 url
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33554 advisory
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34982 advisory
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33936 advisory
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21714 advisory
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21710 advisory
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31394 advisory
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-29785 advisory
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5201 advisory
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21713 advisory
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33216 advisory
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21715 advisory
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21716 advisory
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34714 advisory
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35177 advisory