CVE-2023-48231 Use-After-Free in win_close() in vim

Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. This issue has been addressed in commit 25aabc2b which has been included in release version...

CVE-2023-48231 Use-After-Free in win_close() in vim

Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. This issue has been addressed in commit 25aabc2b which has been included in release version...

CVE-2023-48232

CVE-2023-48232 affects Vim and relates to a floating-point exception when calculating the line offset for overlong lines with smooth scrolling enabled and the cpo setting including the 'n' flag. The issue can occur under specific conditions (non-default settings, window border context, and wrappe...

CVE-2023-48232

Vim is an open source command line text editor. A floating point exception may occur when calculating the line offset for overlong lines and smooth scrolling is enabled and the cpo-settings include the 'n' flag. This may happen when a window border is present and when the wrapped line continues o...

CVE-2023-48232 Floating point Exception in adjust_plines_for_skipcol() in vim

Vim is an open source command line text editor. A floating point exception may occur when calculating the line offset for overlong lines and smooth scrolling is enabled and the cpo-settings include the 'n' flag. This may happen when a window border is present and when the wrapped line continues o...

CVE-2023-48233

CVE-2023-48233 affects Vim. The issue arises when the count after the :s substitute command exceeds what fits in a signed long, causing an overflow. The vulnerability has a low impact with user interaction required; a crash is not necessarily guaranteed. The fix was addressed in commit ac6378773 ...

CVE-2023-48233

Vim is an open source command line text editor. If the count after the :s command is larger than what fits into a signed long variable, abort with evaluetoolarge. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit...

CVE-2023-48233 overflow with count for :s command in vim

Vim is an open source command line text editor. If the count after the :s command is larger than what fits into a signed long variable, abort with evaluetoolarge. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit...

CVE-2023-48234

Vim is an open source command line text editor. When getting the count for a normal mode z command, it may overflow for large counts given. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit 58f9befca1 which has...

CVE-2023-48234 overflow in nv_z_get_count in vim

Vim is an open source command line text editor. When getting the count for a normal mode z command, it may overflow for large counts given. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit 58f9befca1 which has...

CVE-2023-48234

Vim CVE-2023-48234 affects the Vim editor: when computing the count for a normal-mode z command, large counts may overflow due to integer handling. The issue has a low impact with user interaction required and, in some cases, a crash may not occur. It has been addressed in commit 58f9befca1 and i...

CVE-2023-48234 overflow in nv_z_get_count in vim

Vim is an open source command line text editor. When getting the count for a normal mode z command, it may overflow for large counts given. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit 58f9befca1 which has...

CVE-2023-48235

Vim vulnerability CVE-2023-48235 involves an overflow while parsing relative ex addresses. The issue arises in the existing overflow check when the line number becomes negative, leading to LONG_MAX - lnum overflow. It is addressed in commit 060623e and has been included in Vim release 9.0.2110. I...

CVE-2023-48235

Vim is an open source command line text editor. When parsing relative ex addresses one may unintentionally cause an overflow. Ironically this happens in the existing overflow check, because the line number becomes negative and LONGMAX - lnum will cause the overflow. Impact is low, user interactio...

CVE-2023-48236

CVE-2023-48236 ( Vim ): The vulnerability arises when using the z= command; counts larger than MAX_INT may overflow. Affected versions prior to the patch release, resolved by commit 73b2d379 in Vim 9.0.2111. Upgrade to at least 9.0.2111 to address this. Impact is described as low, with user inter...

CVE-2023-48236 overflow in get_number in vim

Vim is an open source command line text editor. When using the z= command, the user may overflow the count with values larger than MAXINT. Impact is low, user interaction is required and a crash may not even happen in all situations. This vulnerability has been addressed in commit 73b2d379 which...

CVE-2023-48237

CVE-2023-48237 (Vim) affects Vim’s shift operation in operator-pending mode when a very large value is used, potentially overflowing an integer. The issue is fixed in Vim commit 6bf131888 and has been included in version 9.0.2112. The described impact is low and user interaction is required; a cr...

CVE-2023-48237 overflow in shift_line in vim

Vim is an open source command line text editor. In affected versions when shifting lines in operator pending mode and using a very large value, it may be possible to overflow the size of integer. Impact is low, user interaction is required and a crash may not even happen in all situations. This...

CVE-2023-48219

Summary of CVE-2023-48219 (TinyMCE): A mutation XSS (mXSS) flaw in TinyMCE’s core undo/redo and related APIs/plugins arises from text nodes in certain parents not being escaped during serialization per HTML standards. If a text node contains a special internal marker, it can combine with other HT...

CVE-2023-48219 Special characters in unescaped text nodes can trigger mXSS in TinyMCE

TinyMCE is an open source rich text editor. A mutation cross-site scripting mXSS vulnerability was discovered in TinyMCE’s core undo/redo functionality and other APIs and plugins. Text nodes within specific parents are not escaped upon serialization according to the HTML standard. If such text...