CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CSIRTSSecurity advisory fusion

← All products & vendors

Vim — security advisories

23 advisorieslatest 2026-07-10⚡ RSS feed

Tracked Vim products:

⚡ Watch Vim

Get an email when a new Vim advisory drops — max one per day, one-click unsubscribe.

[UPDATE] [medium] vim: Multiple vulnerabilities allow code execution

mediumCVE-2026-59858 CVE-2026-59856cert-bund2026-07-10

[UPDATE] [medium] vim: Vulnerability allows Denial of Service

mediumCVE-2026-59857cert-bund2026-07-10

[UPDATE] [high] vim: Vulnerability allows code execution

highCVE-2026-34982cert-bund2026-07-07

[UPDATE] [medium] vim: Multiple vulnerabilities

mediumCVE-2026-57454 CVE-2026-57456cert-bund2026-07-03

[UPDATE] [medium] vim: Vulnerability allows denial of service

mediumCVE-2026-57452cert-bund2026-07-03

[UPDATE] [medium] vim: Multiple vulnerabilities

mediumCVE-2026-57453 CVE-2026-57455cert-bund2026-07-03

[UPDATE] [medium] vim: Multiple vulnerabilities

mediumCVE-2026-55892 CVE-2026-55895cert-bund2026-07-03

[UPDATE] [medium] vim: Vulnerability allows denial of service

mediumCVE-2026-55693cert-bund2026-07-03

[UPDATE] [low] vim: Vulnerability allows file manipulation

lowCVE-2026-35177cert-bund2026-07-03

[UPDATE] [medium] vim: Vulnerability allows code execution

mediumCVE-2026-41411cert-bund2026-07-02

[UPDATE] [medium] vim: Multiple vulnerabilities allow code execution

mediumCVE-2026-43961 CVE-2026-46483cert-bund2026-07-02

CVE-2026-59856: Vim: Arbitrary Code Execution via PHP Omni-Completion

highCVSS 7.8CVE-2026-59856msrc2026-07-02

CVE-2026-55892: Vim: Out-of-bounds Write in Spell File Prefix Dump

mediumCVSS 5.5CVE-2026-55892msrc2026-06-09

CVE-2026-57454: Vim: Out-of-bounds Read with Text Properties

mediumCVSS 6.1CVE-2026-57454msrc2026-06-09

CVE-2026-47162: Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name

unknownCVE-2026-47162msrc2026-06-09

CVE-2026-55895: Vim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filename

highCVSS 7.8CVE-2026-55895msrc2026-06-09

CVE-2026-55693: Vim: Out-of-bounds Write in Spell File Word Count

highCVSS 7.8CVE-2026-55693msrc2026-06-09

CVE-2026-57453: Vim: PowerShell Command Injection via Unescaped Filename in zip.vim Extraction

mediumCVSS 6.5CVE-2026-57453msrc2026-06-09

CVE-2026-57456: Vim: Arbitrary Code Execution via Python Omni-Completion Docstrings

highCVSS 7.8CVE-2026-57456msrc2026-06-09

CVE-2026-52860: Vim: Arbitrary Code Execution via Python Omni-Completion

unknownCVE-2026-52860msrc2026-06-09

CVE-2026-52858: Vim: Arbitrary Code Execution via Python Omni-Completion

unknownCVE-2026-52858msrc2026-06-09

CVE-2026-52859: Vim: Out-of-bounds Read in Terminal Screen Snapshot

unknownCVE-2026-52859msrc2026-06-09

CVE-2026-47167: Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex

unknownCVE-2026-47167msrc2026-06-09