CentOS Linux 7 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (CENTOS7:CLSA-2026:1792804368)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1792804368 advisory. - A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the...

CentOS Linux 6 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (CENTOS6:CLSA-2026:1792745817)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1792745817 advisory. - A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the...

vim: Fix of 2 CVEs

CVE-2026-73073: fix command injection via a crafted typename in ccomplete.vim omni completion upstream 9.2.0845 - CVE-2026-43961: fix command injection via a crafted filename in netrw marked-file handling upstream 9.2.0480...

CLSA-2026-1792803646 vim: Fix of 3 CVEs

CVE-2026-73073: fix command injection via a crafted typename in ccomplete.vim omni completion upstream 9.2.0845 - CVE-2026-43961: fix command injection via a crafted filename in netrw marked-file handling upstream 9.2.0480 - CVE-2026-47167: fix Ruby code execution via a crafted pattern in the...

CLSA-2026-1792807762 vim: Fix of 3 CVEs

CVE-2026-73073: fix command injection via a crafted typename in ccomplete.vim omni completion upstream 9.2.0845 - CVE-2026-43961: fix command injection via a crafted filename in netrw marked-file handling upstream 9.2.0480 - CVE-2026-47167: fix Ruby code execution via a crafted pattern in the...

CLSA-2026-1792745277 vim: Fix of 2 CVEs

CVE-2026-73073: fix command injection via a crafted typename in ccomplete.vim omni completion upstream 9.2.0845 - CVE-2026-43961: fix command injection via a crafted filename in netrw marked-file handling upstream 9.2.0480...

CLSA-2026-1792153017 vim: Fix of 91 CVEs

CVE-2026-73072: fix heap buffer overflow in setsofo with a crafted spell file upstream 9.2.0846 - CVE-2026-73078: fix Ex command injection via crafted netrw bookmark/history menu entries upstream 9.2.0840...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Vim vulnerabilities (USN-8657-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8657-1 advisory. It was discovered that Vim incorrectly handled memory when decoding certain JSON...

EulerOS 2.0 SP11 : vim (EulerOS-SA-2026-4385)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the quoted context...

EulerOS 2.0 SP11 : vim (EulerOS-SA-2026-4295)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the quoted context...

CLSA-2026-1791489381 vim: Fix of 2 CVEs

CVE-2026-73072: fix heap buffer overflow in setsofo with a crafted spell file upstream 9.2.0846 - CVE-2026-73078: fix Ex command injection via crafted netrw bookmark/history menu entries upstream 9.2.0840...

CLSA-2026-1791427864 vim: Fix of 3 CVEs

CVE-2026-73072: fix heap buffer overflow in setsofo with a crafted spell file upstream 9.2.0846 - CVE-2026-73076: fix arbitrary command execution via a crafted .VimballRecord vimball member upstream 9.2.0847 - CVE-2026-73078: fix Ex command injection via crafted netrw bookmark/history menu...

CLSA-2026-1791488919 vim: Fix of 2 CVEs

CVE-2026-73072: fix heap buffer overflow in setsofo with a crafted spell file upstream 9.2.0846 - CVE-2026-73078: fix Ex command injection via crafted netrw bookmark/history menu entries upstream 9.2.0840...

Oracle Linux 8 : vim (ELSA-2026-77359)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-77359 advisory. - RHEL-257017 CVE-2026-73073 arbitrary Ex command execution during C omni-completion - RHEL-253666 CVE-2026-28420 buffer overflow in terminal emulator -...

Astra Linux – Vulnerability in Vim

Vim is an open-source, command-line text editor. Prior to version 9.2.0073, there was a vulnerability related to OS command injection in the netrw standard plugin bundled with Vim. By forcing a user to open a specially crafted URL e.g., using the scp:// protocol handler, an attacker could execute...

vim security update

9.1.083-9.0.1.el102.22 - Remove upstream references Orabug: 31197557 2:9.1.083-9.22 - RHEL-271045 ex command injection via crafted filename in signjump 2:9.1.083-9.21 - RHEL-257016 CVE-2026-73073 arbitrary Ex command execution during C omni-completion 2:9.1.083-9.20 - RHEL-253668 CVE-2026-28420...

CentOS Linux 8.4 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal (CENTOS8.4:CLSA-2026:1781550491)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1781550491 advisory. - Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in...

AlmaLinux 9.6 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1774345469)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1774345469 advisory. - Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the...

AlmaLinux 9.2 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1780713496)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1780713496 advisory. - Vim is an open source, command line text editor. Prior to 9.2.0357, A command injection vulnerability exists in Vim's tag file...

AlmaLinux 9.2 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1774346288)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1774346288 advisory. - Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the...