484 matches found
CVE-2025-55157
Vim (ed. notated as 9.1.x) is affected by CVE-2025-55157 in versions 9.1.1231 through before 9.1.1400. Root cause: use-after-free in internal tuple reference management (tuple_unref) when evaluating nested Vim script tuples, potentially allowing memory corruption. The exploit requires user intera...
OESA-2025-1985 vim security update
Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...
[SECURITY] Fedora 41 Update: vim-9.1.1552-1.fc41
VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...
Vim 路径遍历漏洞
Vim is a cross-platform text editor from the Vim open source. A path traversal vulnerability exists in versions prior to Vim 9.1.1552, which stems from a path traversal issue in the tar.vim plugin that could lead to arbitrary file overwrites...
Vim 路径遍历漏洞
Vim is a cross-platform text editor from the Vim open source. A path traversal vulnerability exists in versions prior to Vim 9.1.1551, which stems from a path traversal issue in the zip.vim plugin that could lead to arbitrary file overwrites...
vim: use-after-free in function ins_compl_get_exp in vim/vim
A flaw was found in Vim, where it is vulnerable to a use-after-free in the inscomplgetexp function. This flaw allows a specially crafted file to crash software, use unexpected values, or possibly execute code when opened in Vim...
OESA-2025-1351 vim security update
Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...
Vim 参数注入漏洞
Vim is a cross-platform text editor from the Vim open source. A parameter injection vulnerability exists in Vim versions prior to 9.1.1198, which stems from zip.vim and specially crafted zip files that may result in data loss...
Linux Distros Unpatched Vulnerability : CVE-2023-46246
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function gagrowinner in in the file src/alloc.c at lin...
Linux Distros Unpatched Vulnerability : CVE-2023-48232
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vim is an open source command line text editor. A floating point exception may occur when calculating the line offset for overlong lines and smooth scrolling is...
Linux Distros Unpatched Vulnerability : CVE-2024-43802
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vim is an improved version of the unix vi text editor. When flushing the typeahead buffer, Vim moves the current position in the typeahead buffer but does not...
Linux Distros Unpatched Vulnerability : CVE-2023-48233
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vim is an open source command line text editor. If the count after the :s command is larger than what fits into a signed long variable, abort with evaluetoolarg...
Linux Distros Unpatched Vulnerability : CVE-2023-48236
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vim is an open source command line text editor. When using the z= command, the user may overflow the count with values larger than MAXINT. Impact is low, user...
AZL-57735 CVE-2025-27423 affecting package vim for versions less than 9.1.1164-1
Vim is an open source, command line text editor. Vim is distributed with the tar.vim plugin, that allows easy editing and viewing of compressed or uncompressed tar files. Starting with 9.1.0858, the tar.vim plugin uses the ":read" ex command line to append below the cursor position, however the i...
AZL-57746 CVE-2025-27423 affecting package vim for versions less than 9.1.1164-1
Vim is an open source, command line text editor. Vim is distributed with the tar.vim plugin, that allows easy editing and viewing of compressed or uncompressed tar files. Starting with 9.1.0858, the tar.vim plugin uses the ":read" ex command line to append below the cursor position, however the i...
CVE-2025-27423 Improper Input Validation in Vim
Vim is an open source, command line text editor. Vim is distributed with the tar.vim plugin, that allows easy editing and viewing of compressed or uncompressed tar files. Starting with 9.1.0858, the tar.vim plugin uses the ":read" ex command line to append below the cursor position, however the i...
CVE-2025-27423 Improper Input Validation in Vim
Vim is an open source, command line text editor. Vim is distributed with the tar.vim plugin, that allows easy editing and viewing of compressed or uncompressed tar files. Starting with 9.1.0858, the tar.vim plugin uses the ":read" ex command line to append below the cursor position, however the i...
[SECURITY] Fedora 41 Update: vim-9.1.1122-1.fc41
VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...
CVE-2025-26603
Vim is a greatly improved version of the good old UNIX editor Vi. Vim allows to redirect screen messages using the :redir ex command to register, variables and files. It also allows to show the contents of registers using the :registers or :display ex command. When redirecting the output of...