rpm package
almalinux/vim-X11
pkg:rpm/almalinux/vim-X11
Vulnerabilities (39)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-59858 | Hig | 7.8 | < 2:8.2.2637-26.el9_8.13 | 2:8.2.2637-26.el9_8.13 | Jul 9, 2026 | Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim interpolates the typeref: or typename: extension field of a tags entry, without escaping, into a :vimgrep pattern that is run through :execute. Becau | |
| CVE-2026-59856 | Hig | 7.8 | < 2:8.2.2637-26.el9_8.13 | 2:8.2.2637-26.el9_8.13 | Jul 9, 2026 | Vim is an open source, command line text editor. Prior to 9.2.0736, the PHP omni-completion script in runtime/autoload/phpcomplete.vim interpolates a class or trait name, taken from the contents of the edited buffer, into a search() pattern that is run via win_execute() without e | |
| CVE-2026-57456 | Hig | 7.8 | < 2:8.2.2637-26.el9_8.13 | 2:8.2.2637-26.el9_8.13 | Jun 25, 2026 | Vim is an open source, command line text editor. Prior to 9.2.0699, Vim's Python omni-completion (runtime/autoload/python3complete.vim and the legacy pythoncomplete.vim) executes reconstructed function and class definitions from the current buffer with exec() as part of populatin | |
| CVE-2026-57455 | Hig | 7.8 | < 2:8.2.2637-26.el9_8.13 | 2:8.2.2637-26.el9_8.13 | Jun 25, 2026 | Vim is an open source, command line text editor. Prior to 9.2.0698, the single-byte branch of spell_soundfold_sofo() in src/spell.c translates a word through a spell file's SOFO (sound-folding) byte map into a caller-owned result buffer. Its copy loop advances the output index ri | |
| CVE-2026-55693 | Hig | 7.8 | < 2:8.2.2637-26.el9_8.13 | 2:8.2.2637-26.el9_8.13 | Jun 25, 2026 | Vim is an open source, command line text editor. Prior to 9.2.0653, the tree_count_words() function in src/spellfile.c fills in the word-count fields of a spell-file word trie by walking it iteratively with a depth counter. The counter is bounded only by the trie structure itself | |
| CVE-2026-41411 | Med | 6.6 | < 2:8.2.2637-26.el9_8.6 | 2:8.2.2637-26.el9_8.6 | Apr 24, 2026 | Vim is an open source, command line text editor. Prior to 9.2.0357, A command injection vulnerability exists in Vim's tag file processing. When resolving a tag, the filename field from the tags file is passed through wildcard expansion to resolve environment variables and wildcar | |
| CVE-2026-35177 | Med | 4.1 | < 2:9.1.083-9.el10_2.3 | 2:9.1.083-9.el10_2.3 | Apr 6, 2026 | Vim is an open source, command line text editor. Prior to 9.2.0280, a path traversal bypass in Vim's zip.vim plugin allows overwriting of arbitrary files when opening specially crafted zip archives, circumventing the previous fix for CVE-2025-53906. This vulnerability is fixed in | |
| CVE-2026-34982 | Hig | 8.2 | < 2:8.0.1763-22.el8_10.3 | 2:8.0.1763-22.el8_10.3 | Apr 6, 2026 | Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command execution when a user opens a crafted file. The `complete`, `guitabtooltip` and `printheader` options are missing the `P_MLE` flag, allowing a | |
| CVE-2026-33412 | Med | 5.6 | < 2:8.0.1763-22.el8_10.1 | 2:8.0.1763-22.el8_10.1 | Mar 24, 2026 | Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob() function on Unix-like systems. By including a newline character (\n) in a pattern passed to glob(), an attacker may be able to execute arbitrary sh | |
| CVE-2026-28421 | Med | 5.3 | < 2:8.0.1763-22.el8_10.1 | 2:8.0.1763-22.el8_10.1 | Feb 27, 2026 | Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault (SEGV) exist in Vim's swap file recovery logic. Both are caused by unvalidated fields read from crafted pointer blocks within a swap file. Version 9.2. | |
| CVE-2026-28417 | Med | 4.4 | < 2:8.0.1763-22.el8_10.1 | 2:8.0.1763-22.el8_10.1 | Feb 27, 2026 | Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the `netrw` standard plugin bundled with Vim. By inducing a user to open a crafted URL (e.g., using the `scp://` protocol handler), an attacker can execute | |
| CVE-2026-25749 | Med | 6.6 | < 2:8.0.1763-22.el8_10 | 2:8.0.1763-22.el8_10 | Feb 6, 2026 | Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the get_tagfname() function in src/tag.c. When process | |
| CVE-2025-53906 | Med | 4.1 | < 2:8.0.1763-21.el8_10 | 2:8.0.1763-21.el8_10 | Jul 15, 2025 | Vim is an open source, command line text editor. Prior to version 9.1.1551, a path traversal issue in Vim’s zip.vim plugin can allow overwriting of arbitrary files when opening specially crafted zip archives. Impact is low because this exploit requires direct user interaction. Ho | |
| CVE-2025-53905 | Med | 4.1 | < 2:8.0.1763-21.el8_10 | 2:8.0.1763-21.el8_10 | Jul 15, 2025 | Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in Vim’s tar.vim plugin can allow overwriting of arbitrary files when opening specially crafted tar archives. Impact is low because this exploit requires direct user interaction. Ho | |
| CVE-2023-4752 | Hig | 7.8 | < 2:8.2.2637-22.el9_6 | 2:8.2.2637-22.el9_6 | Sep 4, 2023 | Use After Free in GitHub repository vim/vim prior to 9.0.1858. | |
| CVE-2022-47024 | Hig | 7.8 | < 2:8.2.2637-20.el9_1 | 2:8.2.2637-20.el9_1 | Jan 20, 2023 | A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or other unspecified impacts. | |
| CVE-2022-1927 | Hig | 7.8 | < 2:8.0.1763-19.el8_6.4 | 2:8.0.1763-19.el8_6.4 | May 29, 2022 | Buffer Over-read in GitHub repository vim/vim prior to 8.2. | |
| CVE-2022-1897 | Hig | 7.8 | < 2:8.0.1763-19.el8_6.4 | 2:8.0.1763-19.el8_6.4 | May 27, 2022 | Out-of-bounds Write in GitHub repository vim/vim prior to 8.2. | |
| CVE-2022-1785 | Hig | 7.8 | < 2:8.0.1763-19.el8_6.4 | 2:8.0.1763-19.el8_6.4 | May 19, 2022 | Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.4977. | |
| CVE-2022-1629 | Hig | 7.8 | < 2:8.2.2637-16.el9_0.2 | 2:8.2.2637-16.el9_0.2 | May 10, 2022 | Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution |
- affected < 2:8.2.2637-26.el9_8.13fixed 2:8.2.2637-26.el9_8.13
Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim interpolates the typeref: or typename: extension field of a tags entry, without escaping, into a :vimgrep pattern that is run through :execute. Becau
- affected < 2:8.2.2637-26.el9_8.13fixed 2:8.2.2637-26.el9_8.13
Vim is an open source, command line text editor. Prior to 9.2.0736, the PHP omni-completion script in runtime/autoload/phpcomplete.vim interpolates a class or trait name, taken from the contents of the edited buffer, into a search() pattern that is run via win_execute() without e
- affected < 2:8.2.2637-26.el9_8.13fixed 2:8.2.2637-26.el9_8.13
Vim is an open source, command line text editor. Prior to 9.2.0699, Vim's Python omni-completion (runtime/autoload/python3complete.vim and the legacy pythoncomplete.vim) executes reconstructed function and class definitions from the current buffer with exec() as part of populatin
- affected < 2:8.2.2637-26.el9_8.13fixed 2:8.2.2637-26.el9_8.13
Vim is an open source, command line text editor. Prior to 9.2.0698, the single-byte branch of spell_soundfold_sofo() in src/spell.c translates a word through a spell file's SOFO (sound-folding) byte map into a caller-owned result buffer. Its copy loop advances the output index ri
- affected < 2:8.2.2637-26.el9_8.13fixed 2:8.2.2637-26.el9_8.13
Vim is an open source, command line text editor. Prior to 9.2.0653, the tree_count_words() function in src/spellfile.c fills in the word-count fields of a spell-file word trie by walking it iteratively with a depth counter. The counter is bounded only by the trie structure itself
- affected < 2:8.2.2637-26.el9_8.6fixed 2:8.2.2637-26.el9_8.6
Vim is an open source, command line text editor. Prior to 9.2.0357, A command injection vulnerability exists in Vim's tag file processing. When resolving a tag, the filename field from the tags file is passed through wildcard expansion to resolve environment variables and wildcar
- affected < 2:9.1.083-9.el10_2.3fixed 2:9.1.083-9.el10_2.3
Vim is an open source, command line text editor. Prior to 9.2.0280, a path traversal bypass in Vim's zip.vim plugin allows overwriting of arbitrary files when opening specially crafted zip archives, circumventing the previous fix for CVE-2025-53906. This vulnerability is fixed in
- affected < 2:8.0.1763-22.el8_10.3fixed 2:8.0.1763-22.el8_10.3
Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command execution when a user opens a crafted file. The `complete`, `guitabtooltip` and `printheader` options are missing the `P_MLE` flag, allowing a
- affected < 2:8.0.1763-22.el8_10.1fixed 2:8.0.1763-22.el8_10.1
Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob() function on Unix-like systems. By including a newline character (\n) in a pattern passed to glob(), an attacker may be able to execute arbitrary sh
- affected < 2:8.0.1763-22.el8_10.1fixed 2:8.0.1763-22.el8_10.1
Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault (SEGV) exist in Vim's swap file recovery logic. Both are caused by unvalidated fields read from crafted pointer blocks within a swap file. Version 9.2.
- affected < 2:8.0.1763-22.el8_10.1fixed 2:8.0.1763-22.el8_10.1
Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the `netrw` standard plugin bundled with Vim. By inducing a user to open a crafted URL (e.g., using the `scp://` protocol handler), an attacker can execute
- affected < 2:8.0.1763-22.el8_10fixed 2:8.0.1763-22.el8_10
Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the get_tagfname() function in src/tag.c. When process
- affected < 2:8.0.1763-21.el8_10fixed 2:8.0.1763-21.el8_10
Vim is an open source, command line text editor. Prior to version 9.1.1551, a path traversal issue in Vim’s zip.vim plugin can allow overwriting of arbitrary files when opening specially crafted zip archives. Impact is low because this exploit requires direct user interaction. Ho
- affected < 2:8.0.1763-21.el8_10fixed 2:8.0.1763-21.el8_10
Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in Vim’s tar.vim plugin can allow overwriting of arbitrary files when opening specially crafted tar archives. Impact is low because this exploit requires direct user interaction. Ho
- affected < 2:8.2.2637-22.el9_6fixed 2:8.2.2637-22.el9_6
Use After Free in GitHub repository vim/vim prior to 9.0.1858.
- affected < 2:8.2.2637-20.el9_1fixed 2:8.2.2637-20.el9_1
A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or other unspecified impacts.
- affected < 2:8.0.1763-19.el8_6.4fixed 2:8.0.1763-19.el8_6.4
Buffer Over-read in GitHub repository vim/vim prior to 8.2.
- affected < 2:8.0.1763-19.el8_6.4fixed 2:8.0.1763-19.el8_6.4
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
- affected < 2:8.0.1763-19.el8_6.4fixed 2:8.0.1763-19.el8_6.4
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.4977.
- affected < 2:8.2.2637-16.el9_0.2fixed 2:8.2.2637-16.el9_0.2
Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution
Page 1 of 2