PT-2026-22417

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.2.0074 Description Vim, an open source command line text editor, has an issue where a heap-based buffer overflow out-of-bounds read can occur in the Emacs-style tags file parsing logic. Processing a specially crafted,...

Vim 安全漏洞

Vim is an open-source, cross-platform text editor developed by Vim developers. Versions of Vim prior to 9.2.0077 contained security vulnerabilities. These vulnerabilities were caused by heap-based buffer overflows and segmentation violations in the file recovery logic, both of which were triggere...

PT-2026-22419

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.2.0076 Description Vim is an open source, command line text editor. A heap-based buffer overflow WRITE and an out-of-bounds READ exist in Vim's terminal emulator when processing maximum combining characters from Unicode...

[SECURITY] Fedora 43 Update: vim-9.2.045-1.fc43

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

[SECURITY] Fedora 43 Update: vim-9.1.2146-1.fc43

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

CVE-2026-26269 Vim has a Netbeans specialKeys Stack Buffer Overflow

Vim is an open source, command line text editor. Prior to 9.1.2148, a stack buffer overflow vulnerability exists in Vim's NetBeans integration when processing the specialKeys command, affecting Vim builds that enable and use the NetBeans feature. The Stack buffer overflow exists in specialkeys in...

CVE-2026-25749

Vim (editor) is affected by CVE-2026-25749 prior to version 9.1.2132, where the tag file resolution logic mishandles the helpfile option. In get_tagfname() (src/tag.c) the user-controlled helpfile value is copied into a fixed-size heap buffer (MAXPATHL+1, ~4097 bytes) via an unsafe STRCPY without...

CVE-2026-25749

Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the gettagfname function in src/tag.c. When processing help file tags,...

PT-2026-8027

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.1.2148 Description Vim is a command line text editor. A stack buffer overflow exists in Vim’s NetBeans integration when processing the specialKeys command, affecting Vim builds that enable and use the NetBeans feature...

The vulnerability of the __memmove_avx_unaligned_erms() function in the vim editor’s memmove-vec-unaligned-erms.S file allows a hacker to trigger a service denial.

The vulnerability of the memmoveavxunalignederms function in the vim editor’s memmove-vec-unaligned-erms.S file is related to writing beyond the allowed range. Exploiting this vulnerability could allow an attacker to cause a service failure...

Advisory ROSA-SA-2025-3032

software: vim 9.1.1768 WASP: ROSA-CHROME unaffected versions = vim-9.1.1768-1 affected versions vim-9.1.1768-1 CVE-ID: CVE-2024-47814 BDU-ID: 2024-08644 CVE-Crit: LOW CVE-DESC.: A vulnerability in the BufWinLeave function of the vim text editor is related to memory usage after memory is freed...

RHEL 9 : vim (RHSA-2025:17742)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:17742 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim path traversal CVE-2025-53906 vim: Vim path...

ALSA-2025:17742 Moderate: vim security update

Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim path traversal CVE-2025-53906 vim: Vim path traversial CVE-2025-53905 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer...

RHEL 8 : vim (RHSA-2025:17715)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:17715 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim path traversal CVE-2025-53906 vim: Vim path...

EUVD-2023-52745

Malicious code in bioql PyPI...

EUVD-2023-50477

Malicious code in bioql PyPI...

The vulnerability of the Vim text editor arises from incorrect restrictions on the path to the restricted access directory, allowing attackers to execute arbitrary commands.

The vulnerability of the Vim text editor is related to incorrect restrictions on the path to the restricted access directory. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

Vim 缓冲区错误漏洞

Vim is a cross-platform text editor from the Vim open source. A buffer error vulnerability exists in Vim version 9.1.0000, which stems from memory corruption due to the operation of the memmoveavxunalignederms function in the memmove-vec-unaligned-erms.S file...

CVE-2025-55157

Vim (ed. notated as 9.1.x) is affected by CVE-2025-55157 in versions 9.1.1231 through before 9.1.1400. Root cause: use-after-free in internal tuple reference management (tuple_unref) when evaluating nested Vim script tuples, potentially allowing memory corruption. The exploit requires user intera...

OESA-2025-1985 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...