Red Hat Security Advisory

RHSA-2026:70818

vim security update

Released 2026-09-23 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v.9.6) vim-X11-2:8.2.2637-22.el9_6.4, vim-common-2:8.2.2637-22.el9_6.4, vim-enhanced-2:8.2.2637-22.el9_6.4
Red Hat Enterprise Linux BaseOS EUS (v.9.6) vim-2:8.2.2637-22.el9_6.4, vim-filesystem-2:8.2.2637-22.el9_6.4, vim-minimal-2:8.2.2637-22.el9_6.4

Fixes 12 records

TI-2026-51285 CVE-2026-73078

Vim: Arbitrary Code Execution via Netrw Menu Construction

LOW 39

Vim is an open source, command line text editor.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00314 Published 2026-08-11 Partial fix · 9.2.0840 CWE-184

TI-2026-51279 CVE-2026-73072

Vim: Heap Buffer Overflow when Loading a Spell File

LOW 38

Vim is an open source, command line text editor.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00115 Published 2026-08-11 Partial fix · 9.2.0846 CWE-122

TI-2026-42671 CVE-2026-59856

Vim: Arbitrary Code Execution via PHP Omni-Completion

LOW 38

Vim is an open source, command line text editor.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00216 Published 2026-07-09 Partial fix · 9.2.0736 CWE-94

TI-2026-51284 CVE-2026-73077

Vim: Arbitrary Code Execution via Shell Keyword Lookup

LOW 37

Vim is an open source, command line text editor.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00144 Published 2026-08-11 Fixed in 9.2.0839 CWE-78

TI-2026-51283 CVE-2026-73076

Vim: Arbitrary Command Execution via Malicious `.VimballRecord` Entry Replay in `vimball.vim`

LOW 37

Vim is an open source, command line text editor.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00134 Published 2026-08-11 Partial fix · 9.2.0847 CWE-829

TI-2026-42673 CVE-2026-59858

Vim: Arbitrary Code Execution via C Omni-Completion

LOW 37

Vim is an open source, command line text editor.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00137 Published 2026-07-09 Partial fix · 9.2.0735 CWE-94

TI-2026-41388 CVE-2026-57456

Vim: Arbitrary Code Execution via Python Omni-Completion Docstrings

LOW 37

Vim is an open source, command line text editor.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00145 Published 2026-06-25 Fixed in 9.2.0699 CWE-94

TI-2026-34752 CVE-2026-47162

Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name

LOW 34

Vim is an open source, command line text editor.

CVSS 4.0HIGH 7.3 Network Low privileges User interaction EPSS 0.00275 Published 2026-06-11 Partial fix · 9.2.0495 CWE-74

TI-2026-37963 CVE-2026-52858

Vim: Arbitrary Code Execution via Python Omni-Completion

LOW 33

Vim is an open source, command line text editor.

CVSS 4.0HIGH 7.3 Network Low privileges User interaction EPSS 0.00201 Published 2026-06-11 Partial fix · 9.2.0561 CWE-829

TI-2026-40208 CVE-2026-55693

Vim: Out-of-bounds Write in Spell File Word Count

LOW 26

Vim is an open source, command line text editor.

CVSS 4.0MEDIUM 5.7 Local No auth User interaction EPSS 0.00124 Published 2026-06-25 Partial fix · 9.2.0653 CWE-787

TI-2026-34757 CVE-2026-47167

Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex

LOW 24

Vim is an open source, command line text editor.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00135 Published 2026-06-11 Partial fix · 9.2.0496 CWE-94

TI-2026-41387 CVE-2026-57455

Vim: Stack out-of-bounds write in `spell_soundfold_sofo()` via an over-length `soundfold()` argument

LOW 20

Vim is an open source, command line text editor.

CVSS 4.0MEDIUM 4.0 Local No auth User interaction EPSS 0.00118 Published 2026-06-25 Partial fix · 9.2.0698 CWE-787