Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2026-34714

35
FAUCET Score

CVE-2026-34714 is a critical vulnerability affecting Vim versions prior to 9.2.0272, enabling immediate code execution when a user opens a specially crafted file due to a %{expr} injection. Rated 9.2 CRITICAL, it has a low attack complexity and requires no user interaction, allowing an attacker with local access to achieve high confidentiality and integrity impacts. Currently, there is no evidence of active exploitation, nor are public exploit modules available on platforms like Metasploit or ExploitDB. However, the vulnerability has generated some community discussion, suggesting awareness among security researchers.

Impacted Technologies

VendorProductVersion(s)CPE
>= 9.1.1390, < 9.2.0272CPE matchmatch criteria
cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*
>= 0, < 9.2.0272CPE match
cpe:2.3:a:vim:vim:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

9.2CRITICAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
LOW
Exploitability Score
2.5
Impact Score
6.0
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.59%
Probability of exploitation in next 30 days
EPSS Percentile
44.6%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0059 is in the 43rd percentile among its peer group of 11,621 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (3)

github_advisorypatch availablevia nvd_reference
View patch
microsoftpatch availablevia msrc
Product: 21147-17084Fixed in: 9.2.0315-1
microsoftpatch availablevia msrc
Product: azl3 vim 9.2.0240-1 on Azure Linux 3.0Fixed in: 9.2.0315-1

Vendor Advisories (1)

microsoft2026-Mar/CVE-2026-34714Important

Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} injection occurs with tabpanel lacking P_MLE.

Mar 10, 2026

References

access.redhat.com / security/cve/CVE-2026-34714
bugzilla.redhat.com / show_bug.cgi
security.access.redhat.com / data/csaf/v2/vex/2026/cve-2026-34714.json
openwall.com / lists/oss-security/2026/04/02/4
Issue TrackingMailing List
openwall.com / lists/oss-security/2026/04/02/5
Mailing List
openwall.com / lists/oss-security/2026/04/03/6
Mailing List
github.com / vim/vim/commit/664701eb7576edb7c7c7d9f2d600815ec1f43459
Patch
github.com / vim/vim/releases/tag/v9.2.0272
Release Notes
github.com / vim/vim/security/advisories/GHSA-2gmj-rpqf-pxvh
Vendor Advisory
openwall.com / lists/oss-security/2026/03/30/3
Mailing ListThird Party Advisory