MiracleLinux 8 : vim-8.0.1763-22.el8_10 (AXSA:2026-306:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-306:01 advisory. vim: Vim: Arbitrary code execution via 'helpfile' option processing CVE-2026-25749 Tenable has extracted the preceding description block directly from the...

Unity Linux 20.1070e Security Update: vim (UTSA-2026-006175)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006175 advisory. A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of the...

Unity Linux 20.1070e Security Update: vim (UTSA-2026-006137)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006137 advisory. Vim is an open source, command line text editor. A segmentation fault was found in Vim before 9.1.1043. In silent Ex mode -s -e, Vim typically doesn't show a screen...

Unity Linux 20.1070e Security Update: vim (UTSA-2026-006139)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006139 advisory. Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when...

Unity Linux 20.1070e Security Update: vim (UTSA-2026-006140)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006140 advisory. Vim is a greatly improved version of the good old UNIX editor Vi. Vim allows to redirect screen messages using the :redir ex command to register, variables and files...

Unity Linux 20.1070e Security Update: vim (UTSA-2026-006155)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006155 advisory. Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in Vims tar.vim plugin can allow overwriting of arbitrary files wh...

Linux Distros Unpatched Vulnerability : CVE-2026-32249

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vim is an open source, command line text editor. From 9.1.0011 to before 9.2.0137, Vim's NFA regex compiler, when encountering a collection containing a combini...

RockyLinux 8 : vim (RLSA-2026:4442)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:4442 advisory. vim: Vim: Arbitrary code execution via 'helpfile' option processing CVE-2026-25749 Tenable has extracted the preceding description block directly from the...

vim: Vim: Arbitrary code execution via 'helpfile' option processing

A flaw was found in Vim, an open source, command line text editor. This heap buffer overflow vulnerability exists in the tag file resolution logic when processing the 'helpfile' option. A local user could exploit this by providing a specially crafted 'helpfile' option value, leading to a heap...

RHEL 8 : vim (RHSA-2026:4442)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:4442 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Arbitrary code execution via 'helpfile' option...

CVE-2026-28417 affecting package vim for versions less than 9.2.0088-1

CVE-2026-28417 affecting package vim for versions less than 9.2.0088-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-28420 affecting package vim for versions less than 9.2.0088-1

CVE-2026-28420 affecting package vim for versions less than 9.2.0088-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-26269 affecting package vim for versions less than 9.2.0088-1

CVE-2026-26269 affecting package vim for versions less than 9.2.0088-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-28421 affecting package vim for versions less than 9.2.0088-1

CVE-2026-28421 affecting package vim for versions less than 9.2.0088-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-28418 affecting package vim for versions less than 9.2.0088-1

CVE-2026-28418 affecting package vim for versions less than 9.2.0088-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-28417 affecting package vim for versions less than 9.2.0088-1

CVE-2026-28417 affecting package vim for versions less than 9.2.0088-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-25749 affecting package vim for versions less than 9.2.0088-1

CVE-2026-25749 affecting package vim for versions less than 9.2.0088-1. An upgraded version of the package is available that resolves this issue...

Vim < 9.2.0077 Heap-based Buffer Overflow (GHSA-r2gw-2x48-jj5p)

The version of Vim installed on the remote host is prior to 9.2.0077. It is, therefore, affected by a vulnerability as referenced in the GHSA-r2gw-2x48-jj5p advisory. - Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault...

Vim < 9.2.0076 Heap-based Buffer Overflow and OOB Read (GHSA-rvj2-jrf9-2phg)

The version of Vim installed on the remote host is prior to 9.2.0076. It is, therefore, affected by a vulnerability as referenced in the GHSA-rvj2-jrf9-2phg advisory. - Vim is an open source, command line text editor. Prior to version 9.2.0076, a heap-based buffer overflow WRITE and an...

The vulnerability of the Vim text editor, related to the lack of measures to neutralize special elements, allows a hacker to execute arbitrary commands.

The vulnerability of the Vim text editor is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows an attacker to execute arbitrary commands...