Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: vifm Clear all filters
TI-2026-73453 CVE-2026-110237 · GHSA-vf53-5m97-qg59

Unverified IPC FIFO in Vifm lets local users run commands as others

Priority LOW 32

Vifm 0.8.1-beta through 0.14.4 reuses a pre-existing IPC FIFO in the shared temporary directory without checking ownership, allowing local users to execute commands as another user.

CVSS 4.0HIGH 7.0 Local Low privileges User interaction EPSS 0.00149 Published 2026-10-13 No fix listed CWE-283
TI-2026-07914 CVE-2026-8997 · GHSA-3623-vc46-pwpv

Heap Buffer Overflow in vifm

Priority LOW 21

vifm is vulnerable to a heap buffer overflow during the history merge process when saving the state file (vifminfo.json).

CVSS 4.0MEDIUM 4.8 Local No auth User interaction EPSS 0.0014 Published 2026-05-22 No fix listed CWE-122