WID-SEC-W-2026-2088

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

vim: Mehrere Schwachstellen

view advisory published 2026-06-25

Ein Angreifer kann mehrere Schwachstellen in vim ausnutzen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, und um beliebigen Programmcode auszuführen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2026-57456UShigh7.8—
Vim is an open source, command line text editor. Prior to 9.2.0699, Vim's Python omni-completion (runtime/autoload/python3complete.vim and the legacy pythoncomplete.vim) executes r…
CVE-2026-57454USmedium6.1—
Vim is an open source, command line text editor. From 9.2.0320 until 9.2.0679, a crafted undo or swap file can store a virtual-text property whose offset and length point outside t…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan