Lucene search
+L

6 matches found

OSV
OSV
added 2026/07/18 11:47 a.m.3 views

SUSE-SU-2026:22754-1 Security update for vim

This update for vim fixes the following issues: Update to version 9.2.0780. Security issues fixed: - CVE-2026-59856: arbitrary code execution via PHP omni-completion due to improper escaping bsc1271194. - CVE-2026-59857: out-of-bounds write in SAL soundfolding due to improper bounds check...

8.4CVSS6.4AI score0.00216EPSS
SaveExploits1References7
OSV
OSV
added 2026/07/10 3:41 p.m.6 views

MGASA-2026-0240 Updated vim packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Arbitrary Code Execution via Python Omni-Completion in Vim 9.1.1783 && Vim = 9.2.0320 && Vim 9.2.0679. CVE-2026-57454 Out-of-bounds Write in SOFO Soundfolding in Vim 9.2.0698. CVE-2026-57455 Arbitrary Code Execution via Python Omni-Completion...

8.4CVSS6.2AI score0.00303EPSS
SaveExploits0References34
Cvelist
Cvelist
added 2026/07/09 10:34 p.m.64 views

CVE-2026-59857 Vim: Out-of-bounds Write in SAL Soundfolding

Vim is an open source, command line text editor. Prior to 9.2.0725, the single-byte branch of spellsoundfoldsal in src/spell.c translates a word through a spell file's SAL sound-folding rules into a caller-owned result buffer, but its result writes are guarded with reslen MAXWLEN, allowing reslen...

5.6CVSS0.00107EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/07/09 10:34 p.m.8 views

CVE-2026-59857 Vim: Out-of-bounds Write in SAL Soundfolding

Vim is an open source, command line text editor. Prior to 9.2.0725, the single-byte branch of spellsoundfoldsal in src/spell.c translates a word through a spell file's SAL sound-folding rules into a caller-owned result buffer, but its result writes are guarded with reslen MAXWLEN, allowing reslen...

5.6CVSS6.1AI score0.00107EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/09 10:34 p.m.39 views

CVE-2026-59857

Vim (up to version 9.2.0724) is affected by an out-of-bounds write in spell_soundfold_sal() in src/spell.c. The single-byte branch translates words via a SAL sound-folding rule into a caller-owned buffer, but reslen

5.6CVSS6AI score0.00107EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/07/09 10:34 p.m.4 views

CVE-2026-59857 Vim: Out-of-bounds Write in SAL Soundfolding

Vim is an open source, command line text editor. Prior to 9.2.0725, the single-byte branch of spellsoundfoldsal in src/spell.c translates a word through a spell file's SAL sound-folding rules into a caller-owned result buffer, but its result writes are guarded with reslen MAXWLEN, allowing reslen...

5.6CVSS6.1AI score0.00107EPSS
SaveExploits0References4
Rows per page
Query Builder