https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T05:37:41.138494+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2017-17087 CVE-2017-17087 2026-10-06T05:37:41.140828+00:00

fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group (which may be different from the group ownership of the original file), which allows local users to obtain sensitive information by leveraging an applicable group membership, as demonstrated by /etc/shadow owned by root:shadow mode 0640, but /etc/.shadow.swp owned by root:users mode 0640, a different vulnerability than CVE-2017-1000382.

 https://cve.radiocsirt.org/vuln/usn-4582-1 USN-4582-1 — vim vulnerabilities 2026-10-06T05:37:41.140878+00:00

Affected: Ubuntu:16.04:LTS: vim, Ubuntu:18.04:LTS: vim

It was discovered that Vim incorrectly handled permissions on the .swp file. A local attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 16.04 LTS. (CVE-2017-17087)

It was discovered that Vim incorrectly handled restricted mode. A local attacker could possibly use this issue to bypass restricted mode and execute arbitrary commands. Note: This update only makes executing shell commands more difficult. Restricted mode should not be considered a complete security measure. (CVE-2019-20807)