Vim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerability

...

CVE-2025-66476

Vim for Windows before 9.1.1947 is affected by CVE-2025-66476, an uncontrolled search-path vulnerability that allows launching a malicious executable in the current working directory when Vim resolves external commands (eg. :grep, :!, compiler/make) while using cmd.exe. Affected product: Vim for ...

EUVD-2025-200373

Vim is an open source, command line text editor. Prior to version 9.1.1947, an uncontrolled search path vulnerability on Windows allows Vim to execute malicious executables placed in the current working directory for the current edited file. On Windows, when using cmd.exe as a shell, Vim resolves...

CVE-2025-66476 Vim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerability

Vim is an open source, command line text editor. Prior to version 9.1.1947, an uncontrolled search path vulnerability on Windows allows Vim to execute malicious executables placed in the current working directory for the current edited file. On Windows, when using cmd.exe as a shell, Vim resolves...

CVE-2025-66476

Vim is an open source, command line text editor. Prior to version 9.1.1947, an uncontrolled search path vulnerability on Windows allows Vim to execute malicious executables placed in the current working directory for the current edited file. On Windows, when using cmd.exe as a shell, Vim resolves...