CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CSIRTSSecurity advisory fusion

← All products & vendors

Vim — security advisories

41 advisorieslatest 2026-08-25⚡ RSS feed

Tracked Vim products:

⚡ Watch Vim

Get an email when a new Vim advisory drops — max one per day, one-click unsubscribe.

USN-8679-1: Vim vulnerability

unknownCVE-2026-73073ubuntu2026-08-25

[NEW] [medium] vim: Multiple vulnerabilities

mediumcert-bund2026-08-25

[NEW] [medium] vim: Multiple vulnerabilities

mediumcert-bund2026-08-25

[UPDATE] [medium] vim: Multiple vulnerabilities allow code execution

mediumCVE-2026-43961 CVE-2026-46483cert-bund2026-08-20

[UPDATE] [medium] vim: Multiple vulnerabilities allow code execution

mediumCVE-2026-59858 CVE-2026-59856cert-bund2026-08-19

[UPDATE] [medium] vim: Multiple vulnerabilities

mediumCVE-2026-57454 CVE-2026-57456cert-bund2026-08-19

[UPDATE] [medium] vim: Multiple vulnerabilities

mediumCVE-2026-57453 CVE-2026-57455cert-bund2026-08-19

[UPDATE] [medium] vim: Vulnerability allows denial of service

mediumCVE-2026-55693cert-bund2026-08-19

[UPDATE] [medium] vim: Multiple vulnerabilities

mediumCVE-2026-52859 CVE-2026-52858cert-bund2026-08-19

[UPDATE] [medium] vim: Multiple vulnerabilities allow code execution

mediumCVE-2026-47167 CVE-2026-47162cert-bund2026-08-19

CVE-2026-73077: Vim: Arbitrary Code Execution via Shell Keyword Lookup

unknownCVE-2026-73077msrc2026-08-11

CVE-2026-73070: Vim: Stack Buffer Overflow in the Vim Socket Server

unknownCVE-2026-73070msrc2026-08-11

CVE-2026-73073: Vim: Arbitrary Ex Command Execution in C Omni-Completion

unknownCVE-2026-73073msrc2026-08-11

CVE-2026-73074: Vim: Heap Buffer Overflow in Text Property Handling

unknownCVE-2026-73074msrc2026-08-11

CVE-2026-73076: Vim: Arbitrary Command Execution via Malicious `.VimballRecord` Entry Replay in `vimball.vim`

unknownCVE-2026-73076msrc2026-08-11

CVE-2026-73078: Vim: Arbitrary Code Execution via Netrw Menu Construction

unknownCVE-2026-73078msrc2026-08-11

CVE-2026-73072: Vim: Heap Buffer Overflow when Loading a Spell File

unknownCVE-2026-73072msrc2026-08-11

CVE-2026-73071: Vim: Use-after-free in JSON Decoding

lowCVSS 3.3CVE-2026-73071msrc2026-08-11

CVE-2026-73075: Vim: Out-of-bounds Access in Popup Opacity Handling

unknownCVE-2026-73075msrc2026-08-11

[UPDATE] [low] vim: Vulnerability allows file manipulation

lowCVE-2026-35177cert-bund2026-08-06

[UPDATE] [low] vim (.tar and .zip): Multiple Vulnerabilities Enable Code Execution

lowCVE-2025-53905 CVE-2025-53906cert-bund2026-08-06

[NEW] [UNPATCHED] [medium] vim (vms_fixfilename): Multiple Vulnerabilities Enable Denial of Service

mediumCVE-2026-51400 CVE-2026-51401cert-bund2026-08-05

[UPDATE] [medium] vim: Vulnerability allows Denial of Service

mediumCVE-2026-59857cert-bund2026-08-04

[UPDATE] [medium] vim: Vulnerability allows code execution

mediumCVE-2026-41411cert-bund2026-07-31

[UPDATE] [medium] vim: Vulnerability allows code execution

mediumCVE-2026-33412cert-bund2026-07-23

[UPDATE] [medium] vim: Multiple vulnerabilities

mediumCVE-2026-55892 CVE-2026-55895cert-bund2026-07-22

USN-8541-1: Vim vulnerabilities

unknownCVE-2026-59856 CVE-2026-59857 CVE-2026-59858ubuntu2026-07-14

CVE-2026-59856: Vim: Arbitrary Code Execution via PHP Omni-Completion

highCVSS 7.8CVE-2026-59856msrc2026-07-14

[UPDATE] [high] vim: Vulnerability allows code execution

highCVE-2026-34982cert-bund2026-07-07

[UPDATE] [medium] vim: Vulnerability allows denial of service

mediumCVE-2026-57452cert-bund2026-07-03

CVE-2026-52859: Vim: Out-of-bounds Read in Terminal Screen Snapshot

unknownCVE-2026-52859msrc2026-06-09

CVE-2026-57454: Vim: Out-of-bounds Read with Text Properties

mediumCVSS 6.1CVE-2026-57454msrc2026-06-09

CVE-2026-47162: Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name

unknownCVE-2026-47162msrc2026-06-09

CVE-2026-55892: Vim: Out-of-bounds Write in Spell File Prefix Dump

mediumCVSS 5.5CVE-2026-55892msrc2026-06-09

CVE-2026-55895: Vim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filename

highCVSS 7.8CVE-2026-55895msrc2026-06-09

CVE-2026-55693: Vim: Out-of-bounds Write in Spell File Word Count

highCVSS 7.8CVE-2026-55693msrc2026-06-09

CVE-2026-57453: Vim: PowerShell Command Injection via Unescaped Filename in zip.vim Extraction

mediumCVSS 6.5CVE-2026-57453msrc2026-06-09

CVE-2026-57456: Vim: Arbitrary Code Execution via Python Omni-Completion Docstrings

highCVSS 7.8CVE-2026-57456msrc2026-06-09

CVE-2026-52860: Vim: Arbitrary Code Execution via Python Omni-Completion

unknownCVE-2026-52860msrc2026-06-09

CVE-2026-52858: Vim: Arbitrary Code Execution via Python Omni-Completion

unknownCVE-2026-52858msrc2026-06-09

CVE-2026-47167: Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex

unknownCVE-2026-47167msrc2026-06-09