Skip to main content

Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

© 2026 Mondoo, Inc.

Log in Get Assessment

CVE-2023-4752 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceCVE-2023-4752

CVE-2023-4752

HIGH7.8

Use After Free in vim/vim

Published Sep 4, 2023

Modified 8 months ago

Details

Use After Free in GitHub repository vim/vim prior to 9.0.1858.

References

http://seclists.org/fulldisclosure/2023/Oct/24

https://github.com/vim/vim/commit/ee9166eb3b41846661a39b662dc7ebe8b5e15139

https://huntr.dev/bounties/85f62dd7-ed84-4fa2-b265-8a369a318757

https://lists.debian.org/debian-lts-announce/2023/09/msg00035.html

https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I56ITJAFMFAQ2G3BMGTCGM3GS62V2DTR/

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ITRVK4FB74RZDIGTZJXOZMUW6X6F4TNF/

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PFE3LDFRZ7EGWA5AU7YHYL62ELBOFZWQ/

https://support.apple.com/kb/HT213984

https://www.cve.org/CVERecord?id=CVE-2023-4752

CVSS Analysis

CVSS v3.1

7.8

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

RequiredUI:R

Scope

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness Type (CWE)

Memory Safety

Ecosystems

Timeline

PublishedSep 4, 2023

ModifiedNov 3, 2025