CVE intelligence

CVE-2024-47814

Vulnerability intelligence

Published Oct 7, 2024Sources checked Oct 24, 2026

4.7MEDIUMCVSS out of 10

What this means

Review the available evidence

CVE-2024-47814 and is rated Medium severity with a CVSS score of 4.7. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.

What to do next

Remediation and response

Microsoft Security Response Center guidance

Vendor revision: Aug 12, 2026

CBL-Mariner Releases

Vendor-listed releases

9.1.0791-1

CISA KEVNot listedBased on the latest collected catalog

EPSS0.3%Estimated 30-day exploitation probability

Ransomware useNot markedCISA KEV ransomware field

Threat actors0Source-linked actor relationships

Overview

What is CVE-2024-47814?

Vim is an open source, command line text editor. A use-after-free was found in Vim < 9.1.0764.

When closing a buffer (visible in a window) a BufWinLeave auto command can cause an use-after-free if this auto command happens to re-open the same buffer in a new split window. Impact is low since the user must have intentionally set up such a strange auto command and run some buffer unload commands.

However this may lead to a crash. This issue has been addressed in version 9.1.0764 and all users are advised to upgrade.

There are no known workarounds for this vulnerability.

Source: NVD