10290 matches found
ROS-20260817-73-0212
The vulnerability in Vim is related to the incorrect neutralization of special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260817-73-0214
The vulnerability in Vim is related to writing outside of the allowed range. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
ROS-20260817-73-0213
The vulnerability in Vim is related to inadequate control over code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
RHEL 10 : vim (RHSA-2026:55431)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55431 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Arbitrary Code Execution via crafted...
Malicious code in svelte-goal-vim (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ad94557dcf8609bd1dbec00633fa3850e30f977d894850f983cf127bb05c1ca The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in kit-hydration-vim (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a567c1c96e08fd606b2ca35ed717ce91df9d0955d4f4c8e0bc747603b2c538e9 On require/import, dist/index.mjs chmods 0755 and spawns the bundled ELF dist/internal/calc.dat as a detached child process. The binary is a full...
MAL-2026-14086 Malicious code in kit-hydration-vim (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a567c1c96e08fd606b2ca35ed717ce91df9d0955d4f4c8e0bc747603b2c538e9 On require/import, dist/index.mjs chmods 0755 and spawns the bundled ELF dist/internal/calc.dat as a detached child process. The binary is a full...
MAL-2026-14096 Malicious code in svelte-goal-vim (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ad94557dcf8609bd1dbec00633fa3850e30f977d894850f983cf127bb05c1ca The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Vim: Stack Buffer Overflow in the Vim Socket Server
...
Vim: Arbitrary Command Execution via Malicious `.VimballRecord` Entry Replay in `vimball.vim`
...
Vim: Arbitrary Code Execution via Shell Keyword Lookup
...
Vim: Heap Buffer Overflow when Loading a Spell File
...
Vim: Heap Buffer Overflow in Text Property Handling
...
Vim: Arbitrary Code Execution via Netrw Menu Construction
...
CVE-2026-73070
A flaw was found in Vim. The socket server backend accepts an unbounded number of client connections, causing file descriptors to overflow internal data structures. A local process able to connect to the server socket can exploit this to corrupt stack memory or terminate the Vim server. This can...
CVE-2026-73074
An integer overflow in Vim's propaddone function allows a local attacker to cause a denial of service or potentially execute arbitrary code by adding an excessive number of text properties to a single line. Mitigation Do not run untrusted Vim scripts or plugins that call propadd in an unbounded...
CVE-2026-73076
A vulnerability in Vim allows remote attackers to execute arbitrary commands by crafting a malicious .VimballRecord file that injects OS commands executed when processed by the vimballRmVimball function. Mitigation Avoid installing or removing vimballs from untrusted sources. This vulnerability...
SUSE CVE-2026-73070
Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c accepts unbounded client connections in socketserveraccept, causing descriptors to overflow fdset structures in src/channel.c and fixed-size struct pollfd arrays in src/osunix.c,...
SUSE CVE-2026-73071
Vim is an open source, command line text editor. From 9.2.0511 until 9.2.0844, jsondecodeitem in src/json.c can retain a stale pointer after jsondecodestring invokes channelfill to refill and free the current buffer, causing the error path to read freed memory instead of reader-jsbuf +...
SUSE CVE-2026-73072
Vim is an open source, command line text editor. Prior to 9.2.0846, setsofo in src/spellfile.c reuses slsalfirst without resetting values left by setsalfirst, so a crafted spell file containing an SNSAL section before an SNSOFO section causes under-counted mapping lists and attacker-influenced...