# CVE-2026-73075

## Summary

- **CVE ID:** CVE-2026-73075
- **Severity:** MEDIUM
- **CVSS Score:** 4.6 (CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N)
- **CWE:** CWE-124, CWE-125
- **Published:** Aug 11, 2026
- **Last Modified:** Aug 11, 2026

## Description

Vim is an open source, command line text editor. From 9.2.0469 until 9.2.0843, popup_mark_opacity_zindex() in src/popupwin.c can use a negative w_winrow for a text-property-anchored popup with clipwindow and opacity, indexing before the screen array instead of accounting for w_popup_topoff and causing an out-of-bounds read and conditional write. This issue is fixed in version 9.2.0843.

## Affected Products

- vim — vim (>= 9.2.0469, < 9.2.0843)

## References

- [CNA](https://github.com/vim/vim/security/advisories/GHSA-pmvp-6rcj-98p4)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.12%
- **EPSS Percentile:** 1.9

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-12._