47 matches found
OESA-2026-3594 vim security update
Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...
TencentOS Server 4: vim (TSSA-2026:0871)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0871 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
SUSE-SU-2026:23365-1 Security update for vim
This update for vim fixes the following issues: Updated to version 9.2.0957. - CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service bsc1275018. - CVE-2026-73071: use-after-free in JSON decoding can lead to process crash bsc1275017. - CVE-2026-73072: heap buffer...
OPENSUSE-SU-2026:21671-1 Security update for vim
This update for vim fixes the following issues: Updated to version 9.2.0957. Security issues fixed: - CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service bsc1275018. - CVE-2026-73071: use-after-free in JSON decoding can lead to process crash bsc1275017. -...
SUSE-SU-2026:23391-1 Security update for vim
This update for vim fixes the following issues: Updated to version 9.2.0957. Security issues fixed: - CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service bsc1275018. - CVE-2026-73071: use-after-free in JSON decoding can lead to process crash bsc1275017. -...
Security update for vim
This update for vim fixes the following issues: CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service bsc1275018. CVE-2026-73071: use-after-free in JSON decoding can lead to process crash bsc1275017. CVE-2026-73072: heap buffer overflow when loading a spell file...
SUSE-SU-2026:3680-1 Security update for vim
This update for vim fixes the following issues: - CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service bsc1275018. - CVE-2026-73071: use-after-free in JSON decoding can lead to process crash bsc1275017. - CVE-2026-73072: heap buffer overflow when loading a spel...
Security update for vim
This update for vim fixes the following issues: CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service bsc1275018. CVE-2026-73071: use-after-free in JSON decoding can lead to process crash bsc1275017. CVE-2026-73072: heap buffer overflow when loading a spell file...
SUSE-SU-2026:3679-1 Security update for vim
This update for vim fixes the following issues: - CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service bsc1275018. - CVE-2026-73071: use-after-free in JSON decoding can lead to process crash bsc1275017. - CVE-2026-73072: heap buffer overflow when loading a spel...
Security update for vim
This update for vim fixes the following issues: CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service bsc1275018. CVE-2026-73071: use-after-free in JSON decoding can lead to process crash bsc1275017. CVE-2026-73072: heap buffer overflow when loading a spell file...
USN-8657-1: Vim vulnerabilities
It was discovered that Vim incorrectly handled memory when decoding certain JSON input. An attacker could possibly use this issue to cause Vim to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. CVE-2026-73071 Yazan Balawn...
CVE-2026-73076
A vulnerability in Vim allows remote attackers to execute arbitrary commands by crafting a malicious .VimballRecord file that injects OS commands executed when processed by the vimballRmVimball function. Mitigation Avoid installing or removing vimballs from untrusted sources. This vulnerability...
SUSE CVE-2026-73076
Vim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named .VimballRecord to overwrite the installation record with attacker-chosen commands. When vimballRmVimball later processes the matching record entry, the stored Ex...
Vim < 9.2.0847 Arbitrary Command Execution (GHSA-r22p-fhw4-84p2)
The version of Vim installed on the remote host is prior to 9.2.0847. It is, therefore, affected by a vulnerability as referenced in the GHSA-r22p-fhw4-84p2 advisory. - runtime/autoload/vimball.vim allows a crafted vimball member named .VimballRecord to overwrite the installation record with...
Linux Distros Unpatched Vulnerability : CVE-2026-73076
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named .VimballRecord to overwri...
ALPINE-CVE-2026-73076
Vim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named .VimballRecord to overwrite the installation record with attacker-chosen commands. When vimballRmVimball later processes the matching record entry, the stored Ex...
AZL-95562 CVE-2026-73076 affecting package vim for versions less than 9.2.0957-1
Vim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named .VimballRecord to overwrite the installation record with attacker-chosen commands. When vimballRmVimball later processes the matching record entry, the stored Ex...
CVE-2026-73076
Vim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named .VimballRecord to overwrite the installation record with attacker-chosen commands. When vimballRmVimball later processes the matching record entry, the stored Ex...
UBUNTU-CVE-2026-73076
Vim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named .VimballRecord to overwrite the installation record with attacker-chosen commands. When vimballRmVimball later processes the matching record entry, the stored Ex...
CVE-2026-73076
Vim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named .VimballRecord to overwrite the installation record with attacker-chosen commands. When vimballRmVimball later processes the matching record entry, the stored Ex...