ROOT-OS-DEBIAN-12-CVE-2026-57455 CVE-2026-57455 in rootio-vim - Patched by Root

Root has patched CVE-2026-57455 in the rootio-vim package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-57456 CVE-2026-57456 in rootio-vim - Patched by Root

Root has patched CVE-2026-57456 in the rootio-vim package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-53905 CVE-2025-53905 in rootio-vim - Patched by Root

Root has patched CVE-2025-53905 in the rootio-vim package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-59856 CVE-2026-59856 in rootio-vim - Patched by Root

Root has patched CVE-2026-59856 in the rootio-vim package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-47162 CVE-2026-47162 in rootio-vim - Patched by Root

Root has patched CVE-2026-47162 in the rootio-vim package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-55895 CVE-2026-55895 in rootio-vim - Patched by Root

Root has patched CVE-2026-55895 in the rootio-vim package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-59858 CVE-2026-59858 in rootio-vim - Patched by Root

Root has patched CVE-2026-59858 in the rootio-vim package for Root:Debian:12. Multiple fixed versions available...

The vulnerability of the Vim text editor lies in the lack of measures to neutralize special elements used in operating system commands, allowing a malicious actor to execute arbitrary commands remotely.

The vulnerability of the Vim text editor is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Oracle Linux 10 : vim (ELSA-2026-19073)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19073 advisory. - RHEL-159616 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob function - RHEL-155410 CVE-2026-28421 vim: Vim: Denial of servic...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Vim vulnerabilities (USN-8541-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8541-1 advisory. Hirohito Higashi discovered that Vim incorrectly escaped class or trait names whe...

USN-8541-1 vim vulnerabilities

Hirohito Higashi discovered that Vim incorrectly escaped class or trait names when performing PHP omni-completion. An attacker could possibly use this issue to trick a user into opening a specially crafted PHP file and executing arbitrary commands. This issue only affected Ubuntu 22.04 LTS, Ubunt...

USN-8541-1: Vim vulnerabilities

Hirohito Higashi discovered that Vim incorrectly escaped class or trait names when performing PHP omni-completion. An attacker could possibly use this issue to trick a user into opening a specially crafted PHP file and executing arbitrary commands. This issue only affected Ubuntu 22.04 LTS, Ubunt...

EulerOS 2.0 SP10 : vim (EulerOS-SA-2026-2677)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tarVimuntar in runtime/autoload/tar.v...

EulerOS 2.0 SP10 : vim (EulerOS-SA-2026-2718)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tarVimuntar in runtime/autoload/tar.v...

Oracle Linux 9 : vim (ELSA-2026-38511)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-38511 advisory. - RHEL-186659 CVE-2026-47162 vim: code injection via NetrwBookHistSave - RHEL-186646 CVE-2026-52858 vim: possible code execution with python3complete ...

CVE-2026-59858

A command injection vulnerability in Vim's C omni-completion script allows an attacker to execute arbitrary commands if a user is tricked into opening a maliciously crafted tags file and manually invoking the autocomplete feature. Mitigation Users are advised to avoid opening untrusted C source...

CVE-2026-59856

A flaw was found in Vim, an open-source command-line text editor. The PHP omni-completion script improperly handles specially crafted input. When a victim opens a malicious PHP file and invokes omni-completion, an unescaped class or trait name can be interpreted as Ex commands. This allows a remo...

CVE-2026-59857

An out-of-bounds write vulnerability in Vim's spellsoundfoldsal function allows an attacker to corrupt memory and crash the editor Denial of Service by supplying a specially crafted word during spell sound-folding. Mitigation This vulnerability can be mitigated by preventing Vim from automaticall...

The vulnerability of the read_compound() function in the Vim text editor, allowing a hacker to cause a service failure

The vulnerability of the readcompound function in the Vim text editor is related to buffer overflows in dynamic memory when processing the spelllang parameter. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-59856 affecting package vim for versions less than 9.2.0782-1

CVE-2026-59856 affecting package vim for versions less than 9.2.0782-1. An upgraded version of the package is available that resolves this issue...