https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T18:47:03.385058+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-14500 bdu:2026-14500 2026-10-04T18:47:03.488734+00:00 bdu:2026-14500 https://cve.radiocsirt.org/vuln/bell-cve-2026-57454 BELL-CVE-2026-57454 2026-10-04T18:47:03.488772+00:00

Affected: Alpaquita:23: vim, Alpaquita:25: vim, Alpaquita:stream: vim

 https://cve.radiocsirt.org/vuln/euvd-2026-330753 EUVD-2026-330753 2026-10-04T18:47:03.488803+00:00 EUVD-2026-330753 https://cve.radiocsirt.org/vuln/fkie_cve-2026-57454 fkie_cve-2026-57454 2026-10-04T18:47:03.488815+00:00

Vim is an open source, command line text editor. From 9.2.0320 until 9.2.0679, a crafted undo or swap file can store a virtual-text property whose offset and length point outside the line's property data. When Vim restores or displays such a line it converts the offset into a pointer and reads the virtual text without bounds checking, causing an out-of-bounds read that can crash Vim or disclose adjacent heap memory. This vulnerability is fixed in 9.2.0679.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-57454 msrc_CVE-2026-57454 — Vim: Out-of-bounds Read with Text Properties 2026-10-04T18:47:03.488842+00:00 msrc_CVE-2026-57454 https://cve.radiocsirt.org/vuln/rhsa-2026:57614 RHSA-2026:57614 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-04T18:47:03.488859+00:00

vim: arbitrary command execution via modeline sandbox bypass vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass vim: Vim: Arbitrary code execution via command injection in NetBeans interface vim: Command injection allows arbitrary code execution via malicious tag files vim: Vimscript injection via unescaped filename in netrw s:NetrwMarkFile() filter() expression allows arbitrary code execution vim: Vim: Arbitrary command execution via :find command-line completion vim: Vim: Heap buffer overflow allows arbitrary code execution or denial of service vim: command injection when decompressing .tgz archives vim: Vim: Arbitrary Code Execution via crafted directory names vim: Vim: Arbitrary code execution via crafted step-definition patterns vim: Vim: Arbitrary code execution via Python omni-completion vim: Vim: Denial of Service via out-of-bounds write in terminal handling vim: Vim: Arbitrary code execution through Python omni-completion. vim: Vim: Denial of service via crafted undo file vim: Vim: Arbitrary code execution via crafted zip archive entry names vim: Vim: Out-of-bounds Read with Text Properties vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-57454 Withdrawn: UBUNTU-CVE-2026-57454 2026-10-04T18:47:03.488907+00:00

Withdrawn by the publisher.

Affected: Ubuntu:Pro:14.04:LTS: vim, Ubuntu:Pro:16.04:LTS: vim, Ubuntu:Pro:18.04:LTS: vim, Ubuntu:Pro:20.04:LTS: vim, Ubuntu:22.04:LTS: vim, Ubuntu:24.04:LTS: vim, Ubuntu:25.10: vim, Ubuntu:26.04:LTS: vim

Vim is an open source, command line text editor. From 9.2.0320 until 9.2.0679, a crafted undo or swap file can store a virtual-text property whose offset and length point outside the line's property data. When Vim restores or displays such a line it converts the offset into a pointer and reads the virtual text without bounds checking, causing an out-of-bounds read that can crash Vim or disclose adjacent heap memory. This vulnerability is fixed in 9.2.0679.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2088 WID-SEC-W-2026-2088 — vim: Mehrere Schwachstellen 2026-10-04T18:47:03.488940+00:00

Ein Angreifer kann mehrere Schwachstellen in vim ausnutzen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, und um beliebigen Programmcode auszuführen.