Browse CVEs

HIGH 7.8 CVE-2026-59856 Vim is an open source, command line text editor. Prior to 9.2.0736, the PHP omni-completion script in runtime/autoload/phpcomplete.vim interpolates a… Vim 9.2.0736+ Fix from $1,9502026-07-09 HIGH 7.8 CVE-2026-59858 Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim interpolates the t… Vim 9.2.0735+ Fix from $1,9502026-07-09 MEDIUM 5.5 CVE-2026-59857 Vim is an open source, command line text editor. Prior to 9.2.0725, the single-byte branch of spell_soundfold_sal() in src/spell.c translates a word … Vim 9.2.0725+ Fix from $1,6002026-07-09 HIGH 7.8 CVE-2026-57455 Vim is an open source, command line text editor. Prior to 9.2.0698, the single-byte branch of spell_soundfold_sofo() in src/spell.c translates a word… Vim 9.2.0698+ Fix from $1,9502026-06-25 HIGH 7.8 CVE-2026-57456 Vim is an open source, command line text editor. Prior to 9.2.0699, Vim's Python omni-completion (runtime/autoload/python3complete.vim and the legacy… Vim 9.2.0699+ Fix from $1,9502026-06-25 HIGH 7.3 CVE-2026-57453 Vim is an open source, command line text editor. From 9.1.1784 until 9.2.0678, when the bundled zip plugin autoload/zip.vim falls back to PowerShell … Vim 9.2.0678+ Fix from $1,9502026-06-25 MEDIUM 6.1 CVE-2026-57451 Vim is an open source, command line text editor. Prior to 9.2.0670, get_text_props() in src/textprop.c reads a uint16 property count stored inline af… Vim 9.2.0670+ Fix from $1,6002026-06-25 MEDIUM 6.1 CVE-2026-57454 Vim is an open source, command line text editor. From 9.2.0320 until 9.2.0679, a crafted undo or swap file can store a virtual-text property whose of… Vim 9.2.0679+ Fix from $1,6002026-06-25 MEDIUM 5.5 CVE-2026-57452 Vim is an open source, command line text editor. Prior to 9.2.0671, when Vim opens a file encrypted with the VimCrypt~04! or VimCrypt~05! method (xch… Vim 9.2.0671+ Fix from $1,6002026-06-25 HIGH 7.8 CVE-2026-55895 Vim is an open source, command line text editor. Prior to 9.2.0663, a Vimscript code injection vulnerability exists in s:NetrwLocalRmFile() in the ne… Vim 9.2.0663+ Fix from $1,9502026-06-25 HIGH 7.8 CVE-2026-55693 Vim is an open source, command line text editor. Prior to 9.2.0653, the tree_count_words() function in src/spellfile.c fills in the word-count fields… Vim 9.2.0653+ Fix from $1,9502026-06-25 MEDIUM 5.5 CVE-2026-55892 Vim is an open source, command line text editor. Prior to 9.2.0662, the dump_prefixes() function in src/spell.c walks a spell-file prefix trie iterat… Vim 9.2.0662+ Fix from $1,6002026-06-25 HIGH 8.2 CVE-2026-52859 Vim is an open source, command line text editor. Prior to version 9.2.0565, the update_snapshot() function in src/terminal.c copies the visible termi… Vim 9.2.0565+ Fix from $1,9502026-06-11 HIGH 7.8 CVE-2026-52858 Vim is an open source, command line text editor. Prior to version 9.2.0561, the Python omni-completion script in python3complete.vim for Vim with the… Vim 9.2.0561+ Fix from $1,9502026-06-11 HIGH 7.8 CVE-2026-52860 Vim is an open source, command line text editor. Prior to version 9.2.0597, Vim's Python omni-completion executes reconstructed function and class de… Vim 9.2.0597+ Fix from $1,9502026-06-11 HIGH 8.8 CVE-2026-47162 Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave() … Vim 9.2.0495+ Fix from $1,9502026-06-11 MEDIUM 5.3 CVE-2026-47167 Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch() in the cucumber fi… Vim 9.2.0496+ Fix from $1,6002026-06-11 HIGH 7.0 CVE-2026-46483 Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tar#Vimuntar() in runtime/autoload/ta… Vim 9.2.0479+ Fix from $1,9502026-05-15 MEDIUM 5.3 CVE-2026-44656 Vim is an open source, command line text editor. Prior to version 9.2.0435, an OS command injection vulnerability exists in Vim's :find command-line … Vim 9.2.0435+ Fix from $1,6002026-05-08 MEDIUM 6.6 CVE-2026-41411 Vim is an open source, command line text editor. Prior to 9.2.0357, A command injection vulnerability exists in Vim's tag file processing. When resol… Vim 9.2.0357+ Fix from $1,6002026-04-24 HIGH 7.8 CVE-2026-39881 Vim is an open source, command line text editor. Prior to 9.2.0316, a command injection vulnerability in Vim's netbeans interface allows a malicious … Vim 9.2.0316+ Fix from $1,9502026-04-08 HIGH 7.1 CVE-2026-35177 Vim is an open source, command line text editor. Prior to 9.2.0280, a path traversal bypass in Vim's zip.vim plugin allows overwriting of arbitrary f… Vim 9.2.0280+ Fix from $1,9502026-04-06 HIGH 8.2 CVE-2026-34982 Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command execution wh… Vim 9.2.0276+ Fix from $1,9502026-04-06 HIGH 8.6 CVE-2026-34714 Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} injectio… Vim 9.2.0272+ Fix from $1,9502026-03-30 HIGH 7.3 CVE-2026-33412 Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob() function on Unix… Vim 9.2.0202+ Fix from $1,9502026-03-24 MEDIUM 5.5 CVE-2026-32249 Vim is an open source, command line text editor. From 9.1.0011 to before 9.2.0137, Vim's NFA regex compiler, when encountering a collection containin… Vim 9.2.0137+ Fix from $1,6002026-03-12 HIGH 7.8 CVE-2026-28421 Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault (SEGV) exist in Vim'… Vim 9.2.0077+ Fix from $1,9502026-02-27 MEDIUM 6.6 CVE-2026-28419 Vim is an open source, command line text editor. Prior to version 9.2.0075, a heap-based buffer underflow exists in Vim's Emacs-style tags file parsi… Vim 9.2.0075+ Fix from $1,6002026-02-27 MEDIUM 5.5 CVE-2026-28418 Vim is an open source, command line text editor. Prior to version 9.2.0074, a heap-based buffer overflow out-of-bounds read exists in Vim's Emacs-sty… Vim 9.2.0074+ Fix from $1,6002026-02-27 HIGH 7.8 CVE-2026-28417 Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the `netrw` standard plug… Vim 9.2.0073+ Fix from $1,9502026-02-27