USN-8342-1 vim vulnerability

It was discovered that Vim did not properly handle backticks in tag filenames. An attacker could possibly use this issue to execute arbitrary commands...

TencentOS Server 3: vim (TSSA-2026:0350)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0350 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

ROS-20260524-73-0028

Vulnerability in vim related to failure to take measures to neutralize special elements used in operating system commands. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary commands...

ROS-20260524-73-0031

A vulnerability in the vim text editor is related to reading beyond buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260524-73-0036

A vulnerability in the zip.vim plugin of the vim text editor is related to an incorrect restriction of the path name of a restricted directory. Exploitation of the vulnerability could allow an attacker to execute arbitrary commands...

ROS-20260524-73-0037

Vulnerability in vim text editor is related to failure to take measures to neutralize special elements. Exploitation of the vulnerability could allow an attacker to execute arbitrary commands...

Fedora 43 : vim (2026-ef37069261)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-ef37069261 advisory. The newest upstream commit Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

CLSA-2026-1779356802 vim: Fix of 21 CVEs

CVE-2022-0572: heap overflow on vcol-overflow in :retab upstream vim 8.2.4359 - CVE-2022-0368: illegal memory access when undo makes Visual area invalid upstream vim 8.2.4217 - CVE-2022-0685: crash on multi-byte char in unixexpandpath upstream vim 8.2.4418 - CVE-2022-2125: heap overflow in...

Astra Linux – Vulnerability in Vim

Vim 8.2.2348 is vulnerable to null pointer dereferencing, allowing local attackers to cause a Denial of Service DoS attack through the exbufferall method...

Astra Linux – Vulnerability in Vim

NULL pointer dereferencing in the GitHub repository for vim/vim before version 8.2.4959...

Astra Linux – Vulnerability in Vim

Heap-based Buffer Overflow in the GitHub repository for vim/vim before version 9.0.1189...

Astra Linux – Vulnerability in Vim

"Divide By Zero" in the GitHub repository for vim/vim before version 9.0.1367...

Astra Linux – Vulnerability in Vim

Heap-based Buffer Overflow in the GitHub repository vim/vim before version 9.0.1144...

Astra Linux – Vulnerability in Vim

Heap-based Buffer Overflow in the GitHub repository vim/vim before version 9.0.1225...

Astra Linux – Vulnerability in Vim

Out-of-bounds write-up in the GitHub repository’s Vim/Vim version prior to 9.0.1145...

Astra Linux – Vulnerability in Vim

A heap-based buffer overflow vulnerability occurs in Vim in the GitHub repository vim/vim, prior to version 8.2.4563...

Astra Linux – Vulnerability in Vim

Heap-based Buffer Overflow in the GitHub repository for vim/vim before version 8.2...

Astra Linux – Vulnerability in Vim

Heap-based Buffer Overflow in the GitHub repository for vim/vim before version 8.2...

Astra Linux – Vulnerability in Vim

Heap-based Buffer Overflow in vim/vim before version 8.2...

Astra Linux – Vulnerability in Vim

Vim is vulnerable to Out-of-bounds Read attacks...