DeutschShown in its original language — a full translation is planned for a future version.
vim: Mehrere Schwachstellen
view advisory published 2026-07-26
Ein lokaler Angreifer kann mehrere Schwachstellen in vim ausnutzen, um beliebigen Programmcode mit Benutzerrechten auszuführen, einen Denial-of-Service-Zustand auszulösen oder vertrauliche Informationen offenzulegen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-73076US | high7.8 | — | ||
Vim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named .VimballRecord to overwrite the installation… | ||||
| CVE-2026-73072US | high7.3 | Exploit | ||
Vim is an open source, command line text editor. Prior to 9.2.0846, set_sofo() in src/spellfile.c reuses sl_sal_first[] without resetting values left by set_sal_first(), so a craft… | ||||
| CVE-2026-73071US | — | — | ||
Vim is an open source, command line text editor. From 9.2.0511 until 9.2.0844, json_decode_item() in src/json.c can retain a stale pointer after json_decode_string() invokes channe… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:66336 vom 2026-09-10external
- Red Hat Security Advisory RHSA-2026:66348 vom 2026-09-10external
- Red Hat Security Advisory RHSA-2026:66366 vom 2026-09-10external
- Red Hat Security Advisory RHSA-2026:68711 vom 2026-09-17external
- Red Hat Security Advisory RHSA-2026:70818 vom 2026-09-23external
- Red Hat Security Advisory RHSA-2026:72465 vom 2026-09-28external
- Red Hat Security Advisory RHSA-2026:72466 vom 2026-09-28external
- Red Hat Security Advisory RHSA-2026:73929 vom 2026-09-30external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan