13 matches found
EulerOS 2.0 SP11 : vim (EulerOS-SA-2026-4385)
According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the quoted context...
EulerOS 2.0 SP15 : vim (EulerOS-SA-2026-3957)
According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to version 9.2.0565, the updatesnapshot function in src/terminal.c copies the visible terminal...
vim security update
9.1.083-9.0.1.el102.22 - Remove upstream references Orabug: 31197557 2:9.1.083-9.22 - RHEL-271045 ex command injection via crafted filename in signjump 2:9.1.083-9.21 - RHEL-257016 CVE-2026-73073 arbitrary Ex command execution during C omni-completion 2:9.1.083-9.20 - RHEL-253668 CVE-2026-28420...
CentOS Linux 8 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1782143913)
The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1782143913 advisory. - Vim is an open source, command line text editor. Prior to version 9.2.0561, the Python omni-completion script in...
AlmaLinux 9.6 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1782222901)
The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782222901 advisory. - Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch i...
CentOS Linux 8.4 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1782143534)
The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1782143534 advisory. - Vim is an open source, command line text editor. Prior to version 9.2.0561, the Python omni-completion script in python3complete.v...
CentOS Linux 8.5 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1782143942)
The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1782143942 advisory. - Vim is an open source, command line text editor. Prior to version 9.2.0561, the Python omni-completion script in python3complete.v...
Vim Update Snapshot Heap Buffer Overflow DoS
The vulnerability in the updatesnapshot function within the src/terminal.c file of the Vim text editor is related to buffer overflow in memory. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality and availability of protected information...
CLSA-2026-1782221662 Fix CVE(s): CVE-2026-47162, CVE-2026-52858, CVE-2026-52859, CVE-2026-52860
SECURITY UPDATE: Code execution via Python omni-completion executing import and from statements harvested from the current buffer through exec gate buffer-derived import execution behind the new g:pythoncompleteallowimport option, disabled by default - debian/patches/CVE-2026-52858.patch: disable...
CVE-2026-52859
Vim is an open source, command line text editor. Prior to version 9.2.0565, the updatesnapshot function in src/terminal.c copies the visible terminal screen into the scrollback buffer when a snapshot is taken. For each screen cell it walks the cell's chars array with no upper bound, stopping only...
CVE-2026-52859: Out-of-bounds Read
Vim is an open source, command line text editor. Prior to version 9.2.0565, the updatesnapshot function in src/terminal.c copies the visible terminal screen into the scrollback buffer when a snapshot is taken. For each screen cell it walks the cell's chars array with no upper bound, stopping only...
Vim buffer error vulnerability
Vim is an open-source, cross-platform text editor developed by Vim. Versions of Vim prior to 9.2.0565 contained a buffer error vulnerability. This vulnerability stemmed from the updatesnapshot function, which performed a copy of the visible terminal screen into the scroll buffer. During this...
CVE-2026-52859: Out-of-bounds Read
Vim is an open source, command line text editor. Prior to version 9.2.0565, the updatesnapshot function in src/terminal.c copies the visible terminal screen into the scrollback buffer when a snapshot is taken. For each screen cell it walks the cell's chars array with no upper bound, stopping only...