DeutschShown in its original language — a full translation is planned for a future version.
vim: Mehrere Schwachstellen
view advisory published 2026-07-23
Ein Angreifer kann mehrere Schwachstellen in vim ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, und um nicht näher spezifizierte Auswirkungen zu verursachen.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-73078US | high8.8 | — | ||
Vim is an open source, command line text editor. Prior to 9.2.0840, runtime/plugin/netrwPlugin.vim loads netrw and runtime/pack/dist/opt/netrw/autoload/netrw.vim constructs Bookmar… | ||||
| CVE-2026-73077US | high7.8 | — | ||
Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attack… | ||||
| CVE-2026-73075US | low3.9 | — | ||
Vim is an open source, command line text editor. From 9.2.0469 until 9.2.0843, popup_mark_opacity_zindex() in src/popupwin.c can use a negative w_winrow for a text-property-anchore… | ||||
| CVE-2026-73074US | medium6.7 | — | ||
Vim is an open source, command line text editor. Prior to 9.2.0841, prop_add_one() in src/textprop.c uses the proplen value from get_text_props() to increment a uint16_t property c… | ||||
| CVE-2026-73070US | medium5.5 | — | ||
Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c accepts unbounded client connections in socketserver_accept(), c… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:66336 vom 2026-09-10external
- Red Hat Security Advisory RHSA-2026:66348 vom 2026-09-10external
- Red Hat Security Advisory RHSA-2026:66366 vom 2026-09-10external
- Red Hat Security Advisory RHSA-2026:68711 vom 2026-09-17external
- Red Hat Security Advisory RHSA-2026:70818 vom 2026-09-23external
- Red Hat Security Advisory RHSA-2026:72465 vom 2026-09-28external
- Red Hat Security Advisory RHSA-2026:72466 vom 2026-09-28external
- Red Hat Security Advisory RHSA-2026:73929 vom 2026-09-30external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan