vim

CVEs (3)

• CVE-2026-59856Jul 10, 2026
  Vim

  Vim
  risk 0.00cvss —epss —

  Vim is an open source, command line text editor. Prior to 9.2.0736, the PHP omni-completion script in runtime/autoload/phpcomplete.vim interpolates a class or trait name, taken from the contents of the edited buffer, into a search() pattern that is run via win_execute() without…

• CVE-2026-59858Jul 10, 2026
  Vim

  Vim
  risk 0.00cvss —epss —

  Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim interpolates the typeref: or typename: extension field of a tags entry, without escaping, into a :vimgrep pattern that is run through :execute.…

• CVE-2026-59857Jul 10, 2026
  Vim

  Vim
  risk 0.00cvss —epss —

  Vim is an open source, command line text editor. Prior to 9.2.0725, the single-byte branch of spell_soundfold_sal() in src/spell.c translates a word through a spell file's SAL sound-folding rules into a caller-owned result buffer, but its result writes are guarded with reslen <…