RHEL 10 : vim (RHSA-2026:30900)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:30900 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: arbitrary command execution via modeline sandbox...

Important Photon OS Security Update - PHSA-2026-5.0-0908

Updates of 'vim', 'krb5', 'mysql' packages of Photon OS have been released...

ROS-20260629-73-0019

The vulnerability in Vim is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Important Photon OS Security Update - PHSA-2026-5.0-92-0908

Updates of 'vim' packages of Photon OS have been released...

ROS-20260629-73-0020

The vulnerability in Vim relates to the failure to take measures to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

ROS-20260629-73-0016

The vulnerability in Vim relates to the failure to take measures to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

ROS-20260629-73-0017

The vulnerability in Vim relates to the failure to take measures to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

ROS-20260629-73-0018

The vulnerability in Vim is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-57453

A security vulnerability exists in the Vim text editor. If a user opens a specially crafted ZIP file in Vim, it can trick the application into running hidden, harmful commands on their computer. This specific issue is only triggered if Vim relies on PowerShell to open the ZIP file...

Vim: Out-of-bounds Read with Text Properties

...

Vim: PowerShell Command Injection via Unescaped Filename in zip.vim Extraction

...

Vim: Out-of-bounds Read in Text Property Count

...

Vim: Out-of-bounds Write in Spell File Prefix Dump

...

Vim: Arbitrary Code Execution via Python Omni-Completion Docstrings

...

Vim: Out-of-bounds Write in Spell File Word Count

...

Vim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filename

...

Vim: Stack out-of-bounds write in `spell_soundfold_sofo()` via an over-length `soundfold()` argument

...

Vim: Out-of-bounds Read with libsodium-encrypted Files

...

SUSE CVE-2026-55693

Vim is an open source, command line text editor. Prior to 9.2.0653, the treecountwords function in src/spellfile.c fills in the word-count fields of a spell-file word trie by walking it iteratively with a depth counter. The counter is bounded only by the trie structure itself; it is never checked...

SUSE CVE-2026-55892

Vim is an open source, command line text editor. Prior to 9.2.0662, the dumpprefixes function in src/spell.c walks a spell-file prefix trie iteratively with a depth counter while dumping the prefixes that apply to a word. The counter is bounded only by the trie structure itself; it is never check...