What is CVE-2022-1968?

CVE-2022-1968 is a high-severity "Use After Free" vulnerability in Vim, with a CVSS score of 7.8. It affects certain versions of Vim, Debian Linux, and macOS, potentially allowing arbitrary code execution and denial-of-service. Users should update their software and apply security patches to mitigate this risk.

Who is impacted by CVE-2022-1968?

CVE-2022-1968 affects users of Vim up to version 8.1 and macOS Ventura 13 with WebKit on various Mac models, including Mac Studio (2022), Mac Pro (2019 and later), MacBook Air (2018 and later), MacBook Pro (2017 and later), Mac mini (2018 and later), iMac (2017 and later), MacBook (2017), and iMac Pro (2017).

What to do if CVE-2022-1968 affected you

If you're affected by the CVE-2022-1968 vulnerability, it's crucial to take action to protect your system. Follow these simple steps:

1. Update Vim to version 8.2.5050 or later.

2. For Debian Linux users, update to version 9.0 or 10.0.

3. Mac users should update to macOS Ventura 13, available on the Apple Software Downloads website.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2022-1968 vulnerability, also known as "Use After Free," is not listed in CISA's Known Exploited Vulnerabilities Catalog. It was published on June 2, 2022. There is no specific due date or required action mentioned, but users are advised to update their software and apply relevant security patches to mitigate the risks associated with this vulnerability.

Weakness Enumeration

The weakness enumeration for this vulnerability is categorized as CWE-416, which is a Use After Free issue affecting Vim and macOS Ventura 13.

Learn More

For a comprehensive understanding of its description, severity, technical details, and affected software configurations, refer to the NVD page and the sources listed below.

• Apple Product Security via Fulldisclosure