8710 matches found
ROOT-OS-DEBIAN-11-CVE-2026-55693 CVE-2026-55693 in rootio-vim - Patched by Root
Root has patched CVE-2026-55693 in the rootio-vim package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-57456 CVE-2026-57456 in rootio-vim - Patched by Root
Root has patched CVE-2026-57456 in the rootio-vim package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-43961 CVE-2026-43961 in rootio-vim - Patched by Root
Root has patched CVE-2026-43961 in the rootio-vim package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-57455 CVE-2026-57455 in rootio-vim - Patched by Root
Root has patched CVE-2026-57455 in the rootio-vim package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-57453 CVE-2026-57453 in rootio-vim - Patched by Root
Root has patched CVE-2026-57453 in the rootio-vim package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-52858 CVE-2026-52858 in rootio-vim - Patched by Root
Root has patched CVE-2026-52858 in the rootio-vim package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-55895 CVE-2026-55895 in rootio-vim - Patched by Root
Root has patched CVE-2026-55895 in the rootio-vim package for Root:Debian:11. Multiple fixed versions available...
CVE-2026-47162
A flaw was found in Vim, an open-source text editor. This vulnerability, located in the netrw plugin, involves a code injection issue when the editor processes directory paths. A malicious directory name, if crafted by an attacker, could bypass security measures and allow for the execution of...
vim: zip.vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass
A flaw was found in Vim's zip.vim plugin. A local user could be tricked into opening a specially crafted zip archive, which would allow a path traversal bypass. This vulnerability enables an attacker to overwrite arbitrary files on the system, potentially leading to data integrity issues or furth...
vim: arbitrary command execution via modeline sandbox bypass
A flaw was found in Vim. A modeline is used to set specific editor options directly from a text file. However, the complete, guitabtooltip, printheader options and the mapset function lack proper security checks, allowing an attacker to bypass restrictions and cause arbitrary OS command execution...
vim: command injection when decompressing .tgz archives
A flaw was found in Vim. When decompressing .tgz archives, the Vimuntar function builds shell commands using shellescape without the special flag. This allows a specially crafted archive filename to trigger Vim cmdline-special expansion and execute arbitrary commands in the context of the current...
vim: Vim: Command injection allows arbitrary code execution via malicious tag files
A flaw was found in Vim, an open-source command-line text editor. This command injection vulnerability occurs during tag file processing. A local user could craft a malicious tags file containing backtick syntax in the filename field. When Vim resolves a tag from this file, it executes the embedd...
Important: Red Hat Security Advisory: vim security update
An update for vim is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...
Important Photon OS Security Update - PHSA-2026-5.0-0908
Updates of 'vim', 'krb5', 'mysql' packages of Photon OS have been released...
RHEL 10 : vim (RHSA-2026:30900)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:30900 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: arbitrary command execution via modeline sandbox...
CVE-2026-57453
A security vulnerability exists in the Vim text editor. If a user opens a specially crafted ZIP file in Vim, it can trick the application into running hidden, harmful commands on their computer. This specific issue is only triggered if Vim relies on PowerShell to open the ZIP file...
Vim: Out-of-bounds Read with Text Properties
...
Vim: PowerShell Command Injection via Unescaped Filename in zip.vim Extraction
...