23 matches found
vim: Fix of CVE-2026-57456
CVE-2026-57456: use repr to quote python omni-completion doc strings before exec in the Scope/Class/Function getcode of pythoncomplete/python3complete, preventing code execution via a crafted docstring upstream 9.2.0699...
CLSA-2026-1779279626 vim: Fix of CVE-2026-42307
CVE-2026-42307: fix OS command injection in netrw plugin via crafted sftp:// URLs by hardening the tempfile suffix regex and escaping the tempfile argument before passing it to the sftp command...
CLSA-2026-1779130193 vim: Fix of CVE-2022-3520
CVE-2022-3520: clamp bopend.col = 0 in doput to prevent Visual block put underflow...
CLSA-2026-1778858288 vim: Fix of CVE-2026-34982
CVE-2026-34982: fix vim modeline sandbox bypass via complete/guitabtooltip/printheader options and mapset...
CLSA-2026-1777567716 vim: Fix of CVE-2026-39881
CVE-2026-39881: fix command injection in netbeans interface by validating defineAnnoType typeName/fg/bg and specialKeys tokens against an allowlist of safe characters before interpolating them into Ex commands...
CLSA-2026-1777385906 vim: Fix of CVE-2026-33412
CVE-2026-33412: fix command injection via newline character in glob on Unix-like systems by escaping '\n' in SHELLSPECIAL...
CLSA-2026-1776948287 vim: Fix of CVE-2022-3234
CVE-2022-3234 fix heap buffer overflow in opreplace when replacing NUL after Tab in virtualedit mode...
CLSA-2026-1776947567 vim: Fix of CVE-2022-3234
CVE-2022-3234 fix heap buffer overflow in opreplace when replacing NUL after Tab in virtualedit mode...
CLSA-2026-1772703383 vim: Fix of CVE-2026-26269
CVE-2026-26269: fix stack-based buffer overflow in NetBeans integration that could lead to a crash or arbitrary code execution via a malicious server...
CLSA-2025-1737024983 vim: Fix of CVE-2023-0288
CVE-2023-0288: prevent the cursor from moving to line zero to fix invalid memory access with folding and using "L"...
CVE-2023-48231 Use-After-Free in win_close() in vim
Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. This issue has been addressed in commit 25aabc2b which has been included in release version...
CLSA-2023-1698352063 vim: Fix of 2 CVEs
CVE-2023-5441: segfault in exmode - CVE-2023-5344: buffer overflow in truncstring...
CLSA-2023-1685634253 vim: Fix of CVE-2023-2609
CVE-2023-2609: check "yarray" is not NULL...
CLSA-2023-1685633907 vim: Fix of CVE-2023-2609
CVE-2023-2609: check "yarray" is not NULL...
CLSA-2023-1679925093 vim: Fix of CVE-2023-1170
CVE-2023-1170: adjust the cursor column if needed...
CLSA-2023-1678820960 vim: Fix of CVE-2023-1175
CVE-2023-1175: make sure "startspaces" is not negative...
CLSA-2023-1678820270 vim: Fix of CVE-2023-1175
CVE-2023-1175: make sure "startspaces" is not negative...
CLSA-2023-1674814108 vim: Fix of CVE-2023-0049
CVE-2023-0049: fix out-of-bounds read...