CLSA-2026-1767617422 Update of vim

Bump version...

PT-2026-8027

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.1.2148 Description Vim is a command line text editor. A stack buffer overflow exists in Vim’s NetBeans integration when processing the specialKeys command, affecting Vim builds that enable and use the NetBeans feature...

PT-2026-29096

Name of the Vulnerable Software and Affected Versions: Vim versions prior to 9.2.0272. Description: Vim versions prior to 9.2.0272 contain a flaw that allows for code execution upon opening a crafted file in the default configuration. This is due to a %expr injection occurring within the tabpanel...

PT-2026-25059

Name of the Vulnerable Software and Affected Versions Vim versions 9.1.0011 through 9.2.0136 Description Vim, a command line text editor, has an issue where its NFA regex compiler can experience a segmentation fault. This occurs when the compiler encounters a character range containing a combinin...

PT-2026-26509

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.2.0202 Description Vim, a command line text editor, contains a flaw in its glob function on Unix-like systems. Including a newline character within a pattern provided to glob could allow an attacker to execute arbitrary...

Slackware: Security Advisory (SSA:2025-361-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Moderate Photon OS Security Update - PHSA-2025-4.0-0934

Updates of 'vim' packages of Photon OS have been released...

[slackware-security] vim

New vim packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/vim-9.1.2028-i586-1slack15.0.txz: Upgraded. This update fixes a security issue: patch 9.1.2028: security: Buffer-overflow with incomplet...

Slackware Linux 15.0 / current vim Vulnerability (SSA:2025-361-01)

The version of vim installed on the remote host is prior to 9.1.2028. It is, therefore, affected by a vulnerability as referenced in the SSA:2025-361-01 advisory. New vim packages are available for Slackware 15.0 and -current to fix a security issue. Tenable has extracted the preceding descriptio...

CLSA-2025-1766597554 vim: Fix of CVE-2025-53905

CVE-2025-53905: fix Vim path traversal issue in tar.vim...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2025-2603)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2025-2568)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.13.1 : vim (EulerOS-SA-2025-2568)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in Vims tar.vim plugin can allow...

Vim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vim for Windows. User interaction is required to exploit this vulnerability in that the target must open a malicious file and perform one of a set of specific actions in the editor. The specific flaw...

Vim < 9.1.1947 RCE

The version of Vim installed on the remote host is prior to 9.1.1947. It is, therefore, affected by a vulnerability as referenced in the GHSA-g77q-xrww-p834 advisory. - Prior to version 9.1.1947, an uncontrolled search path vulnerability on Windows allows Vim to execute malicious executables plac...

CLSA-2025-1765208529 vim: Fix of 2 CVEs

CVE-2025-53906: drop leading ../ on write of zipfiles, don't forcefully overwrite existing files - CVE-2025-29768: use glob '-' to protect filenames starting with '-'...

Vim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerability

...

Oracle Linux 10 : vim (ELSA-2025-21015)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-21015 advisory. - RHEL-113549 CVE-2025-53906 vim: Vim path traversal Tenable has extracted the preceding description block directly from the Oracle Linux security...

Linux Distros Unpatched Vulnerability : CVE-2025-66476

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vim is an open source, command line text editor. Prior to version 9.1.1947, an uncontrolled search path vulnerability on Windows allows Vim to execute malicious...

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-10.3.1.2)

The version of AHV installed on the remote host is prior to 10.3.1.2. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-10.3.1.2 advisory. - A heap-buffer-overflow off-by-one flaw was found in the GnuTLS software in the template parsing logic within the certtool...