[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fdvlM27_M2YmluIvDPQ__9mlNqvDowA3bAizRdgkvAF8":3,"g5a-risk:CVE-2022-37173":105},{"success":4,"data":5,"meta":102},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":28,"epssPercentile":25,"epssTimeSeries":29,"severity":30,"affectedProducts":31,"affectedProductsCount":42,"references":43,"referencesCount":50,"weaknesses":51,"weaknessesCount":50,"isActivelyExploited":60,"cisaInfo":25,"otxData":25,"relatedBlogPosts":61,"seoMetadata":62,"configurations":87,"relatedVendorCves":100,"notableEvents":101},"CVE-2022-37173","What is CVE-2022-37173?","An issue in the installer of gvim 9.0.0000 allows authenticated attackers to execute arbitrary code via a binary hijacking attack on C:\\Program.exe.","2022-08-30T21:15:09.677","2022-09-06T17:47:52.013",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":25,"CVSSMetricV2":25,"CVSSMetricV40":25},[15],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":21,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":24,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":24,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.9,0.00409,[28,28,28,28,28,28,28],"High",[32,37],{"vendor":33,"product":34,"version":35,"criteria":36,"vulnerable":4},"vim","gvim","9.0.0000","cpe:2.3:a:vim:gvim:9.0.0000:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"microsoft","windows","-","cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",2,[44],{"url":45,"source":46,"tags":47},"https:\u002F\u002Fgithub.com\u002Fycdxsb\u002FVuln\u002Ftree\u002Fmain\u002FGvim-Installer-Vuln","GitHub",[48,49],"Broken Link","Third Party Advisory",1,[52],{"id":53,"name":54,"description":55,"extendedDescription":56,"status":57,"abstraction":58,"structure":59},"CWE-276","Incorrect Default Permissions","During installation, installed file permissions are set to allow anyone to modify those files.","","Draft","Base","Simple",false,[],{"title":63,"metaDescription":64,"keywords":65,"canonicalUrl":66,"structuredData":67},"What is CVE-2022-37173? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-37173, a high severity cyber security vulnerability from 2022. An issue in the installer of gvim 9.0.0000 allows authentic...","CVE-2022-37173, CVE-2022-37173 vulnerability, CVE-2022-37173 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, vim security, microsoft security, gvim vulnerability, windows vulnerability","\u002Fwhat-is\u002Fcve-2022-37173",{"@context":68,"@type":69,"headline":63,"description":64,"datePublished":9,"dateModified":10,"author":70,"publisher":74,"about":78,"mainEntityOfPage":82,"articleSection":85,"keywords":86},"https:\u002F\u002Fschema.org","TechArticle",{"@type":71,"name":72,"url":73},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":71,"name":72,"url":73,"logo":75},{"@type":76,"url":77},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":79,"name":6,"description":80,"additionalType":81},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":83,"@id":84},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-37173","Cybersecurity","CVE-2022-37173, CVE-2022-37173 vulnerability, CVE-2022-37173 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[88],{"Operator":89,"Negate":25,"Nodes":90},"AND",[91,96],{"Operator":92,"Negate":25,"CPEMatch":93},"OR",[94],{"Vulnerable":4,"Criteria":36,"MatchCriteriaID":95,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"EB3C9BB3-C923-4118-AF39-51957327B4D5",{"Operator":92,"Negate":25,"CPEMatch":97},[98],{"Vulnerable":25,"Criteria":41,"MatchCriteriaID":99,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"A2572D17-1DE6-457B-99CC-64AFD54487EA",[],[],{"lastModified":10,"cacheTime":103,"version":104},1792466327203,"2.0",{"score":106,"band":107,"action":108,"scoredAt":109},47,"Medium","Plan remediation","2026-10-16T06:55:33.710255+00:00"]