CVE-2026-25749

Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the gettagfname function in src/tag.c. When processing help file tags,...

Vim 安全漏洞

Vim is an open-source, cross-platform text editor developed by Vim developers. Versions of Vim prior to 9.1.2132 contained a security vulnerability. This vulnerability stemmed from a heap buffer overflow issue when handling the helpfile option, which could lead to the execution of arbitrary code...

EulerOS Virtualization 2.10.1 : vim (EulerOS-SA-2026-1150)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in Vims tar.vim plugin can allow...

Astra Linux – Vulnerability in Vim

Vim is an open-source, command-line text editor. Prior to version 9.1.1551, a path traversal issue in Vim’s zip.vim plugin could allow overwriting of arbitrary files when opening specially crafted zip archives. The impact is limited because this exploit requires direct user interaction. However,...

Astra Linux – Vulnerability in Vim

Vim is an open-source, command-line text editor. A use-after-free vulnerability was discovered in Vim versions prior to 9.1.0764. When closing a buffer visible in a window, the BufWinLeave autocommand can lead to a use-after-free if this autocommand reopens the same buffer in a new split window...

Astra Linux – Vulnerability in Vim

Vim is a revised version of the Unix vi text editor. When flushing the typeahead buffer, Vim moves the current position within the typeahead buffer, but it does not check whether there is enough space left in the buffer to handle the next characters. This can cause the off position within the...

MiracleLinux 8 : vim-8.0.1763-19.el8.4 (AXSA:2023-4598:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-4598:01 advisory. vim: Out-of-bounds Write CVE-2022-1785 vim: out-of-bounds write in vimregsubboth in regexp.c CVE-2022-1897 vim: buffer over-read in utfptr2char in...

MiracleLinux 8 : vim-8.0.1763-19.el8.2 (AXSA:2022-3678:04)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3678:04 advisory. vim: heap buffer overflow CVE-2022-1621 vim: buffer over-read CVE-2022-1629 Tenable has extracted the preceding description block directly from the...

MiracleLinux 8 : vim-8.0.1763-16.el8.13 (AXSA:2022-3161:03)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3161:03 advisory. vim: use after free in utfptr2char CVE-2022-1154 Tenable has extracted the preceding description block directly from the MiracleLinux security advisory. Note...

MiracleLinux 9 : vim-8.2.2637-21.el9 (AXSA:2024-9180:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-9180:02 advisory. vim: heap-based buffer overflow vulnerability CVE-2021-3903 Tenable has extracted the preceding description block directly from the MiracleLinux security...

MiracleLinux 7 : vim-7.4.160-6.el7 (AXSA:2019-3915:02)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2019-3915:02 advisory. vim/neovim: ':source!' command allows arbitrary command execution via modelines CVE-2019-12735 Tenable has extracted the preceding description block directly...

MiracleLinux 4 : vim-7.4.629-5.AXS4.1 (AXSA:2016-1206:01)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2016-1206:01 advisory. VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular...

MiracleLinux 9 : vim-8.2.2637-22.el9_6 (AXSA:2025-10442:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10442:01 advisory. vim: use-after-free in function inscomplgetexp in vim/vim CVE-2023-4752 Tenable has extracted the preceding description block directly from the MiracleLinux...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2026-1012)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2026-1018)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP9 : vim (EulerOS-SA-2026-1018)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability, which was classified as critical, has been found in vim up to 9.1.1550 Word Processing Software.Using CWE to declare the problem lea...

EulerOS 2.0 SP9 : vim (EulerOS-SA-2026-1012)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability, which was classified as critical, has been found in vim up to 9.1.1550 Word Processing Software.Using CWE to declare the problem lea...

PT-2026-29096

Name of the Vulnerable Software and Affected Versions: Vim versions prior to 9.2.0272. Description: Vim versions prior to 9.2.0272 contain a flaw that allows for code execution upon opening a crafted file in the default configuration. This is due to a %expr injection occurring within the tabpanel...

Slackware Linux 15.0 / current vim Vulnerability (SSA:2025-361-01)

The version of vim installed on the remote host is prior to 9.1.2028. It is, therefore, affected by a vulnerability as referenced in the SSA:2025-361-01 advisory. New vim packages are available for Slackware 15.0 and -current to fix a security issue. Tenable has extracted the preceding descriptio...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2025-2603)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...