OPENSUSE-SU-2026:21374-1 Security update for vim

This update for vim fixes the following issues: Update to version 9.2.0780. Security issues fixed: - CVE-2026-59856: arbitrary code execution via PHP omni-completion due to improper escaping bsc1271194. - CVE-2026-59857: out-of-bounds write in SAL soundfolding due to improper bounds check...

SUSE-SU-2026:22754-1 Security update for vim

This update for vim fixes the following issues: Update to version 9.2.0780. Security issues fixed: - CVE-2026-59856: arbitrary code execution via PHP omni-completion due to improper escaping bsc1271194. - CVE-2026-59857: out-of-bounds write in SAL soundfolding due to improper bounds check...

SUSE-SU-2026:22821-1 Security update for vim

This update for vim fixes the following issues: Update to version 9.2.0780. Security issues fixed: - CVE-2026-59856: arbitrary code execution via PHP omni-completion due to improper escaping bsc1271194. - CVE-2026-59857: out-of-bounds write in SAL soundfolding due to improper bounds check...

SUSE-SU-2026:22740-1 Security update for vim

This update for vim fixes the following issues: Update to version 9.2.0780. Security issues fixed: - CVE-2026-59856: arbitrary code execution via PHP omni-completion due to improper escaping bsc1271194. - CVE-2026-59857: out-of-bounds write in SAL soundfolding due to improper bounds check...

SUSE-SU-2026:22797-1 Security update for vim

This update for vim fixes the following issues - Updated to version 9.2.0780 - CVE-2026-59856: Arbitrary Code Execution via PHP Omni-Completion bsc1271194. - CVE-2026-59857: Out-of-bounds Write in SAL Soundfolding bsc1271195. - CVE-2026-59858: Arbitrary Code Execution via C Omni-Completion...

vim: Fix of CVE-2026-59858

CVE-2026-59858: fix arbitrary Ex command execution in C omni-completion by escaping the typeref/typename tag field before inserting it into the :vimgrep pattern in ccomplete.vim upstream 9.2.0735...

The vulnerability of the Vim text editor lies in the lack of measures to neutralize special elements used in operating system commands, allowing attackers to execute arbitrary commands.

The vulnerability of the Vim text editor is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

ROS-20260716-73-0041

The vulnerability in Vim is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Vim text editor lies in the lack of measures to neutralize special elements used in operating system commands, allowing a malicious actor to execute arbitrary commands remotely.

The vulnerability of the Vim text editor is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the Vim text editor, related to improper handling of code generation, allows a hacker to execute arbitrary code.

The vulnerability of the Vim text editor is related to improper handling of code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

ROS-20260716-73-0044

The vulnerability in Vim is related to incorrect elimination of separators. Exploiting this vulnerability can allow an attacker to gain access to modify the system’s configuration...

The vulnerability of the Vim text editor lies in the lack of measures to neutralize special elements used in operating system commands, allowing attackers to execute arbitrary commands.

The vulnerability of the Vim text editor is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Vim vulnerabilities (USN-8541-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8541-1 advisory. Hirohito Higashi discovered that Vim incorrectly escaped class or trait names whe...

Oracle Linux 10 : vim (ELSA-2026-19073)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19073 advisory. - RHEL-159616 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob function - RHEL-155410 CVE-2026-28421 vim: Vim: Denial of servic...

USN-8541-1 vim vulnerabilities

Hirohito Higashi discovered that Vim incorrectly escaped class or trait names when performing PHP omni-completion. An attacker could possibly use this issue to trick a user into opening a specially crafted PHP file and executing arbitrary commands. This issue only affected Ubuntu 22.04 LTS, Ubunt...

USN-8541-1: Vim vulnerabilities

Hirohito Higashi discovered that Vim incorrectly escaped class or trait names when performing PHP omni-completion. An attacker could possibly use this issue to trick a user into opening a specially crafted PHP file and executing arbitrary commands. This issue only affected Ubuntu 22.04 LTS, Ubunt...

vim security update

8.2.2637-26.0.1.el98.10 - Remove upstream references Orabug: 31197557 2:8.2.2637-26.10 - RHEL-186659 CVE-2026-47162 vim: code injection via NetrwBookHistSave 2:8.2.2637-26.9 - RHEL-186646 CVE-2026-52858 vim: possible code execution with python3complete 2:8.2.2637-26.8 - RHEL-185874 CVE-2026-47167...

EulerOS 2.0 SP10 : vim (EulerOS-SA-2026-2677)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tarVimuntar in runtime/autoload/tar.v...

EulerOS 2.0 SP10 : vim (EulerOS-SA-2026-2718)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tarVimuntar in runtime/autoload/tar.v...

Oracle Linux 9 : vim (ELSA-2026-38511)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-38511 advisory. - RHEL-186659 CVE-2026-47162 vim: code injection via NetrwBookHistSave - RHEL-186646 CVE-2026-52858 vim: possible code execution with python3complete ...