9443 matches found
CVE-2026-43961
Vim's s:NetrwMarkFile() function in runtime/pack/dist/opt/netrw/autoload/netrw.vim interpolates a directory-listing filename directly into a filter() expression string ('v:val != "'.dname.'"'). A crafted filename with a double quote breaks the literal, allowing arbitrary Vimscript and shell execu...
CVE-2026-43961 Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution
A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the quoted context during mark/unmark operations, allowing arbitrary Vimscript execution. This can be leveraged to run shell commands with the privileges of the user...
CVE-2026-43961 Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution
A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the quoted context during mark/unmark operations, allowing arbitrary Vimscript execution. This can be leveraged to run shell commands with the privileges of the user...
CVE-2026-43961
A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the quoted context during mark/unmark operations, allowing arbitrary Vimscript execution. This can be leveraged to run shell commands with the privileges of the user...
CVE-2026-43961
A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the quoted context during mark/unmark operations, allowing arbitrary Vimscript execution. This can be leveraged to run shell commands with the privileges of the user...
vim: Vim: Stack Buffer Overflow via unbounded socket connections
A flaw was found in Vim. The socket server backend accepts an unbounded number of client connections, causing file descriptors to overflow internal data structures. A local process able to connect to the server socket can exploit this to corrupt stack memory or terminate the Vim server. This can...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: vim: vim-X11-9.2.967-1.hum1 aarch64, x8664 vim-common-9.2.967-1.hum1 aarch64, x8664 vim-data-9.2.967-1.hum1 noarch vim-default-editor-9.2.967-1.hum1 noarch vim-enhanced-9.2.967-1.hum1 aarch64,...
ROS-20260819-73-0027
The vulnerability in Vim relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux Distros Unpatched Vulnerability : CVE-2026-73073
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command...
ROS-20260819-73-0031
The vulnerability in Vim relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260819-73-0030
The vulnerability in Vim relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260819-73-0038
The vulnerability in Vim is related to writing beyond the buffer’s memory boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
CVE-2026-73073
Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an unterminated collection followed by a command...
ROS-20260819-73-0026
The vulnerability in Vim relates to the execution of functions from an unverified and uncontrolled area. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260819-73-0034
The vulnerability in Vim is related to writing beyond the buffer’s memory boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
ROS-20260819-73-0028
The vulnerability in Vim is related to writing beyond the buffer’s memory boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
ROS-20260819-73-0036
The vulnerability in Vim is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260819-73-0033
The vulnerability in Vim is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...