Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command execution when a user opens a crafted file. The complete, guitabtooltip and printheader options are missing the P_MLE flag, allowing a modeline to be executed. Additionally, the mapset() function lacks a check_secure() call, allowing it to be abused from sandboxed expressions. Commit 9.2.0276 fixes the issue.
2:8.2.2434-3ubuntu32:8.2.2434-3ubuntu42:8.2.3565-1ubuntu12:8.2.3565-1ubuntu22:8.2.3565-1ubuntu32:8.2.3565-1ubuntu52:8.2.3995-1ubuntu12:8.2.3995-1ubuntu22:8.2.3995-1ubuntu2.12:8.2.3995-1ubuntu2.10+21 more2:9.0.1672-1ubuntu22:9.0.2087-1ubuntu12:9.0.2116-1ubuntu12:9.0.2116-1ubuntu22:9.0.2184-0ubuntu12:9.0.2189-1ubuntu12:9.1.0-1ubuntu12:9.1.0016-1ubuntu22:9.1.0016-1ubuntu62:9.1.0016-1ubuntu7+11 more2:9.1.0967-1ubuntu42:9.1.0967-1ubuntu52:9.1.0967-1ubuntu62:9.1.0967-1ubuntu6.12:9.1.0967-1ubuntu6.22:8.1.0875-5ubuntu22:8.1.0875-5ubuntu32:8.1.0875-5ubuntu42:8.1.2269-1ubuntu12:8.1.2269-1ubuntu42:8.1.2269-1ubuntu52:8.1.2269-1ubuntu5.112:8.1.2269-1ubuntu5.122:8.1.2269-1ubuntu5.132:8.1.2269-1ubuntu5.14+23 moreExploitability
AV:LAC:LPR:NUI:RScope
S:CImpact
C:HI:HA:NCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N