Astra Linux – Vulnerability in Vim

Vim is an open-source, command-line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allowed arbitrary OS commands to be executed when a user opened a crafted file. The complete, guitabtooltip, and printheader options lacked the PMLE flag, enabling a modeline to be execute...

AZL-81914 CVE-2026-34982 affecting package vim for versions less than 9.2.0315-1

Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command execution when a user opens a crafted file. The complete, guitabtooltip and printheader options are missing the PMLE flag, allowing a modeline to be executed...

AZL-81195 CVE-2026-34714 affecting package vim for versions less than 9.2.0315-1

Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %expr injection occurs with tabpanel lacking PMLE...

ALPINE-CVE-2026-34714

Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %expr injection occurs with tabpanel lacking PMLE...

CVE-2026-34714

Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %expr injection occurs with tabpanel lacking PMLE...

CVE-2026-34714: Improper Neutralization of Special Elements used in an OS Command

Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %expr injection occurs with tabpanel lacking PMLE...