PT-2026-70250

Name of the Vulnerable Software and Affected Versions Vim versions 9.2.0469 through 9.2.0842 Description The popup mark opacity zindex function in src/popupwin.c can use a negative w winrow for a text-property-anchored popup with clipwindow and opacity. This leads to indexing before the screen...

PT-2026-70246

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.2.0842 Description The socket server backend in src/socketserver.c accepts unbounded client connections in the socketserver accept function. This behavior causes descriptors to overflow fd set structures in src/channel....

CVE-2026-73075: Buffer Underwrite

Vim is an open source, command line text editor. From 9.2.0469 until 9.2.0843, popupmarkopacityzindex in src/popupwin.c can use a negative wwinrow for a text-property-anchored popup with clipwindow and opacity, indexing before the screen array instead of accounting for wpopuptopoff and causing an...

CVE-2026-73070: Stack-based Buffer Overflow

Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c accepts unbounded client connections in socketserveraccept, causing descriptors to overflow fdset structures in src/channel.c and fixed-size struct pollfd arrays in src/osunix.c,...

CVE-2026-73071: Use After Free

Vim is an open source, command line text editor. From 9.2.0511 until 9.2.0844, jsondecodeitem in src/json.c can retain a stale pointer after jsondecodestring invokes channelfill to refill and free the current buffer, causing the error path to read freed memory instead of reader-jsbuf +...

RockyLinux 10 : vim (RLSA-2026:38509)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:38509 advisory. vim: command injection when decompressing .tgz archives CVE-2026-46483 vim: Vim: Arbitrary Code Execution via crafted directory names CVE-2026-47162 vi...

RockyLinux 9 : vim (RLSA-2026:38511)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:38511 advisory. vim: command injection when decompressing .tgz archives CVE-2026-46483 vim: Vim: Arbitrary Code Execution via crafted directory names CVE-2026-47162 vim...

RockyLinux 8 : vim (RLSA-2026:38510)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:38510 advisory. vim: command injection when decompressing .tgz archives CVE-2026-46483 vim: Vim: Arbitrary Code Execution via crafted directory names CVE-2026-47162 vim...

CVE-2026-73077: Improper Neutralization of Special Elements used in an OS Command

Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual-mode selections from K through keywordprg commands without safely separating shell arguments...

CVE-2026-73074: Integer Overflow or Wraparound

Vim is an open source, command line text editor. Prior to 9.2.0841, propaddone in src/textprop.c uses the proplen value from gettextprops to increment a uint16t property count beyond 0xffff, wrapping the count to zero and copying existing text-property records into a heap allocation sized for non...

Security Bulletin:Vulnerability in Vim affects IBM Netezza Appliance

Summary The Vim package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2020-20703 Vulnerability Details CVEID:CVE-2020-20703 DESCRIPTION: Buffer Overflow vulnerability in VIM v.8.1.2135 allows a remote attacker to execute arbitrary code via the operand...

Important Photon OS Security Update - PHSA-2026-5.0-92-0950

Updates of 'vim' packages of Photon OS have been released...

ROS-20260810-73-0027

The vulnerability in Vim is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Photon OS 5.0: Vim PHSA-2026-5.0-91-0908

An update of the vim package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0908. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Vim PHSA-2026-5.0-91-0774

An update of the vim package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0774. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Vim PHSA-2025-5.0-91-0538

An update of the vim package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0538. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Vim PHSA-2026-5.0-91-0830

An update of the vim package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0830. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Vim PHSA-2023-5.0-91-0070

An update of the vim package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0070. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Alibaba Cloud Linux 3 : 0243: vim (ALINUX3-SA-2026:0243)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0243 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-55693: Vim is an open source,...

Photon OS 5.0: Vim PHSA-2025-5.0-91-0611

An update of the vim package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0611. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...