RHSA-2026:38510

Vulnerability from csaf_redhat - Published: 2026-07-13 07:56 - Updated: 2026-08-11 09:40
Summary
Red Hat Security Advisory: vim security update
Severity
Important
Notes
Topic: An update for vim is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: command injection when decompressing .tgz archives (CVE-2026-46483) * vim: Vim: Arbitrary Code Execution via crafted directory names (CVE-2026-47162) * vim: Vim: Arbitrary code execution via Python omni-completion (CVE-2026-52858) * vim: Vim: Arbitrary code execution via crafted step-definition patterns (CVE-2026-47167) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-46483

A flaw was found in Vim. When decompressing .tgz archives, the Vimuntar function builds shell commands using shellescape() without the {special} flag. This allows a specially crafted archive filename to trigger Vim cmdline-special expansion and execute arbitrary commands in the context of the current user.

7.0 (High)
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products
Product Identifier Version Remediation
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-2:8.0.1763-27.el8_10.src —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-filesystem-2:8.0.1763-27.el8_10.noarch —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Threats
Impact Moderate
CVE-2026-47162

A flaw was found in Vim, an open-source text editor. This vulnerability, located in the netrw plugin, involves a code injection issue when the editor processes directory paths. A malicious directory name, if crafted by an attacker, could bypass security measures and allow for the execution of unauthorized commands. This could lead to arbitrary code execution on the affected system.

7.3 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CWE-140 - Improper Neutralization of Delimiters
Affected products
Product Identifier Version Remediation
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.aarch64 —
Vendor Fix fix
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.ppc64le —
Vendor Fix fix
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.s390x —
Vendor Fix fix
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.x86_64 —
Vendor Fix fix
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-2:8.0.1763-27.el8_10.src —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.aarch64 —
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.ppc64le —
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.s390x —
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.x86_64 —
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x —
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x —
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x —
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64 —
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le —
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x —
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64 —
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.aarch64 —
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.ppc64le —
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.s390x —
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.x86_64 —
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x —
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-filesystem-2:8.0.1763-27.el8_10.noarch —
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x —
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x —
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x —
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x —
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64 —
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le —
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x —
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64 —
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x —
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.aarch64 —
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.ppc64le —
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.s390x —
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.x86_64 —
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x —
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Threats
Impact Important
CVE-2026-47167

A flaw was found in Vim, a command-line text editor. This vulnerability, identified as a code injection, affects the cucumber filetype plugin when Vim is configured with Ruby support. An attacker could exploit this by creating a malicious repository containing specially crafted step-definition patterns. If a user opens this repository and triggers a specific function, the crafted patterns are unsafely processed, potentially allowing the attacker to execute unauthorized commands on the user's system.

7.3 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CWE-94 - Improper Control of Generation of Code ('Code Injection')
Affected products
Product Identifier Version Remediation
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-2:8.0.1763-27.el8_10.src —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-filesystem-2:8.0.1763-27.el8_10.noarch —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Threats
Impact Important
CVE-2026-52858

A flaw was found in Vim, a widely used command-line text editor. This vulnerability allows a local attacker to execute arbitrary code on the system. By opening a specially crafted Python file and then triggering the omni-completion feature, the attacker can cause Vim to run malicious code from a sibling Python package. This could lead to a complete compromise of the user's system.

7.3 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CWE-94 - Improper Control of Generation of Code ('Code Injection')
Affected products
Product Identifier Version Remediation
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-2:8.0.1763-27.el8_10.src —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-filesystem-2:8.0.1763-27.el8_10.noarch —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64 —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x —
Workaround
Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64 —
Workaround
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2026:38510 self
https://access.redhat.com/security/updates/classi… external
https://bugzilla.redhat.com/show_bug.cgi?id=2477915 external
https://bugzilla.redhat.com/show_bug.cgi?id=2487964 external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-46483 self
https://bugzilla.redhat.com/show_bug.cgi?id=2477915 external
https://www.cve.org/CVERecord?id=CVE-2026-46483 external
https://nvd.nist.gov/vuln/detail/CVE-2026-46483 external
https://github.com/vim/vim/commit/3fb5e58fbc63d86… external
https://github.com/vim/vim/releases/tag/v9.2.0479 external
https://github.com/vim/vim/security/advisories/GH… external
https://access.redhat.com/security/cve/CVE-2026-47162 self
https://bugzilla.redhat.com/show_bug.cgi?id=2487964 external
https://www.cve.org/CVERecord?id=CVE-2026-47162 external
https://nvd.nist.gov/vuln/detail/CVE-2026-47162 external
https://github.com/vim/vim/commit/f08ab2f4d7d2947… external
https://github.com/vim/vim/releases/tag/v9.2.0495 external
https://github.com/vim/vim/security/advisories/GH… external
https://access.redhat.com/security/cve/CVE-2026-47167 self
https://bugzilla.redhat.com/show_bug.cgi?id=2487996 external
https://www.cve.org/CVERecord?id=CVE-2026-47167 external
https://nvd.nist.gov/vuln/detail/CVE-2026-47167 external
https://github.com/vim/vim/commit/a65a52d684bc585… external
https://github.com/vim/vim/releases/tag/v9.2.0496 external
https://github.com/vim/vim/security/advisories/GH… external
https://access.redhat.com/security/cve/CVE-2026-52858 self
https://bugzilla.redhat.com/show_bug.cgi?id=2487981 external
https://www.cve.org/CVERecord?id=CVE-2026-52858 external
https://nvd.nist.gov/vuln/detail/CVE-2026-52858 external
https://github.com/vim/vim/commit/4b850457e12e1a6… external
https://github.com/vim/vim/releases/tag/v9.2.0561 external
https://github.com/vim/vim/security/advisories/GH… external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for vim is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Vim (Vi IMproved) is an updated and improved version of the vi editor.\n\nSecurity Fix(es):\n\n* vim: command injection when decompressing .tgz archives (CVE-2026-46483)\n\n* vim: Vim: Arbitrary Code Execution via crafted directory names (CVE-2026-47162)\n\n* vim: Vim: Arbitrary code execution via Python omni-completion (CVE-2026-52858)\n\n* vim: Vim: Arbitrary code execution via crafted step-definition patterns (CVE-2026-47167)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:38510",
        "url": "https://access.redhat.com/errata/RHSA-2026:38510"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2477915",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477915"
      },
      {
        "category": "external",
        "summary": "2487964",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487964"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_38510.json"
      }
    ],
    "title": "Red Hat Security Advisory: vim security update",
    "tracking": {
      "current_release_date": "2026-08-11T09:40:53+00:00",
      "generator": {
        "date": "2026-08-11T09:40:53+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.14"
        }
      },
      "id": "RHSA-2026:38510",
      "initial_release_date": "2026-07-13T07:56:23+00:00",
      "revision_history": [
        {
          "date": "2026-07-13T07:56:23+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-07-13T07:56:23+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-11T09:40:53+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                  "product_id": "AppStream-8.10.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS (v. 8)",
                  "product_id": "BaseOS-8.10.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:8::baseos"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vim-X11-2:8.0.1763-27.el8_10.aarch64",
                "product": {
                  "name": "vim-X11-2:8.0.1763-27.el8_10.aarch64",
                  "product_id": "vim-X11-2:8.0.1763-27.el8_10.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-X11@8.0.1763-27.el8_10?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-common-2:8.0.1763-27.el8_10.aarch64",
                "product": {
                  "name": "vim-common-2:8.0.1763-27.el8_10.aarch64",
                  "product_id": "vim-common-2:8.0.1763-27.el8_10.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-common@8.0.1763-27.el8_10?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-enhanced-2:8.0.1763-27.el8_10.aarch64",
                "product": {
                  "name": "vim-enhanced-2:8.0.1763-27.el8_10.aarch64",
                  "product_id": "vim-enhanced-2:8.0.1763-27.el8_10.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-enhanced@8.0.1763-27.el8_10?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-debugsource-2:8.0.1763-27.el8_10.aarch64",
                "product": {
                  "name": "vim-debugsource-2:8.0.1763-27.el8_10.aarch64",
                  "product_id": "vim-debugsource-2:8.0.1763-27.el8_10.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-debugsource@8.0.1763-27.el8_10?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64",
                "product": {
                  "name": "vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64",
                  "product_id": "vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-X11-debuginfo@8.0.1763-27.el8_10?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64",
                "product": {
                  "name": "vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64",
                  "product_id": "vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-common-debuginfo@8.0.1763-27.el8_10?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-debuginfo-2:8.0.1763-27.el8_10.aarch64",
                "product": {
                  "name": "vim-debuginfo-2:8.0.1763-27.el8_10.aarch64",
                  "product_id": "vim-debuginfo-2:8.0.1763-27.el8_10.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-debuginfo@8.0.1763-27.el8_10?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64",
                "product": {
                  "name": "vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64",
                  "product_id": "vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-enhanced-debuginfo@8.0.1763-27.el8_10?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64",
                "product": {
                  "name": "vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64",
                  "product_id": "vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-minimal-debuginfo@8.0.1763-27.el8_10?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-minimal-2:8.0.1763-27.el8_10.aarch64",
                "product": {
                  "name": "vim-minimal-2:8.0.1763-27.el8_10.aarch64",
                  "product_id": "vim-minimal-2:8.0.1763-27.el8_10.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-minimal@8.0.1763-27.el8_10?arch=aarch64\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vim-X11-2:8.0.1763-27.el8_10.ppc64le",
                "product": {
                  "name": "vim-X11-2:8.0.1763-27.el8_10.ppc64le",
                  "product_id": "vim-X11-2:8.0.1763-27.el8_10.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-X11@8.0.1763-27.el8_10?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-common-2:8.0.1763-27.el8_10.ppc64le",
                "product": {
                  "name": "vim-common-2:8.0.1763-27.el8_10.ppc64le",
                  "product_id": "vim-common-2:8.0.1763-27.el8_10.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-common@8.0.1763-27.el8_10?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-enhanced-2:8.0.1763-27.el8_10.ppc64le",
                "product": {
                  "name": "vim-enhanced-2:8.0.1763-27.el8_10.ppc64le",
                  "product_id": "vim-enhanced-2:8.0.1763-27.el8_10.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-enhanced@8.0.1763-27.el8_10?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-debugsource-2:8.0.1763-27.el8_10.ppc64le",
                "product": {
                  "name": "vim-debugsource-2:8.0.1763-27.el8_10.ppc64le",
                  "product_id": "vim-debugsource-2:8.0.1763-27.el8_10.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-debugsource@8.0.1763-27.el8_10?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
                "product": {
                  "name": "vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
                  "product_id": "vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-X11-debuginfo@8.0.1763-27.el8_10?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
                "product": {
                  "name": "vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
                  "product_id": "vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-common-debuginfo@8.0.1763-27.el8_10?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
                "product": {
                  "name": "vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
                  "product_id": "vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-debuginfo@8.0.1763-27.el8_10?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
                "product": {
                  "name": "vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
                  "product_id": "vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-enhanced-debuginfo@8.0.1763-27.el8_10?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
                "product": {
                  "name": "vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
                  "product_id": "vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-minimal-debuginfo@8.0.1763-27.el8_10?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-minimal-2:8.0.1763-27.el8_10.ppc64le",
                "product": {
                  "name": "vim-minimal-2:8.0.1763-27.el8_10.ppc64le",
                  "product_id": "vim-minimal-2:8.0.1763-27.el8_10.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-minimal@8.0.1763-27.el8_10?arch=ppc64le\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vim-X11-2:8.0.1763-27.el8_10.x86_64",
                "product": {
                  "name": "vim-X11-2:8.0.1763-27.el8_10.x86_64",
                  "product_id": "vim-X11-2:8.0.1763-27.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-X11@8.0.1763-27.el8_10?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-common-2:8.0.1763-27.el8_10.x86_64",
                "product": {
                  "name": "vim-common-2:8.0.1763-27.el8_10.x86_64",
                  "product_id": "vim-common-2:8.0.1763-27.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-common@8.0.1763-27.el8_10?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-enhanced-2:8.0.1763-27.el8_10.x86_64",
                "product": {
                  "name": "vim-enhanced-2:8.0.1763-27.el8_10.x86_64",
                  "product_id": "vim-enhanced-2:8.0.1763-27.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-enhanced@8.0.1763-27.el8_10?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-debugsource-2:8.0.1763-27.el8_10.x86_64",
                "product": {
                  "name": "vim-debugsource-2:8.0.1763-27.el8_10.x86_64",
                  "product_id": "vim-debugsource-2:8.0.1763-27.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-debugsource@8.0.1763-27.el8_10?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64",
                "product": {
                  "name": "vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64",
                  "product_id": "vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-X11-debuginfo@8.0.1763-27.el8_10?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64",
                "product": {
                  "name": "vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64",
                  "product_id": "vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-common-debuginfo@8.0.1763-27.el8_10?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-debuginfo-2:8.0.1763-27.el8_10.x86_64",
                "product": {
                  "name": "vim-debuginfo-2:8.0.1763-27.el8_10.x86_64",
                  "product_id": "vim-debuginfo-2:8.0.1763-27.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-debuginfo@8.0.1763-27.el8_10?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64",
                "product": {
                  "name": "vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64",
                  "product_id": "vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-enhanced-debuginfo@8.0.1763-27.el8_10?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64",
                "product": {
                  "name": "vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64",
                  "product_id": "vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-minimal-debuginfo@8.0.1763-27.el8_10?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-minimal-2:8.0.1763-27.el8_10.x86_64",
                "product": {
                  "name": "vim-minimal-2:8.0.1763-27.el8_10.x86_64",
                  "product_id": "vim-minimal-2:8.0.1763-27.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-minimal@8.0.1763-27.el8_10?arch=x86_64\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vim-X11-2:8.0.1763-27.el8_10.s390x",
                "product": {
                  "name": "vim-X11-2:8.0.1763-27.el8_10.s390x",
                  "product_id": "vim-X11-2:8.0.1763-27.el8_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-X11@8.0.1763-27.el8_10?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-common-2:8.0.1763-27.el8_10.s390x",
                "product": {
                  "name": "vim-common-2:8.0.1763-27.el8_10.s390x",
                  "product_id": "vim-common-2:8.0.1763-27.el8_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-common@8.0.1763-27.el8_10?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-enhanced-2:8.0.1763-27.el8_10.s390x",
                "product": {
                  "name": "vim-enhanced-2:8.0.1763-27.el8_10.s390x",
                  "product_id": "vim-enhanced-2:8.0.1763-27.el8_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-enhanced@8.0.1763-27.el8_10?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-debugsource-2:8.0.1763-27.el8_10.s390x",
                "product": {
                  "name": "vim-debugsource-2:8.0.1763-27.el8_10.s390x",
                  "product_id": "vim-debugsource-2:8.0.1763-27.el8_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-debugsource@8.0.1763-27.el8_10?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x",
                "product": {
                  "name": "vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x",
                  "product_id": "vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-X11-debuginfo@8.0.1763-27.el8_10?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x",
                "product": {
                  "name": "vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x",
                  "product_id": "vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-common-debuginfo@8.0.1763-27.el8_10?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-debuginfo-2:8.0.1763-27.el8_10.s390x",
                "product": {
                  "name": "vim-debuginfo-2:8.0.1763-27.el8_10.s390x",
                  "product_id": "vim-debuginfo-2:8.0.1763-27.el8_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-debuginfo@8.0.1763-27.el8_10?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x",
                "product": {
                  "name": "vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x",
                  "product_id": "vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-enhanced-debuginfo@8.0.1763-27.el8_10?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x",
                "product": {
                  "name": "vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x",
                  "product_id": "vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-minimal-debuginfo@8.0.1763-27.el8_10?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-minimal-2:8.0.1763-27.el8_10.s390x",
                "product": {
                  "name": "vim-minimal-2:8.0.1763-27.el8_10.s390x",
                  "product_id": "vim-minimal-2:8.0.1763-27.el8_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-minimal@8.0.1763-27.el8_10?arch=s390x\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vim-filesystem-2:8.0.1763-27.el8_10.noarch",
                "product": {
                  "name": "vim-filesystem-2:8.0.1763-27.el8_10.noarch",
                  "product_id": "vim-filesystem-2:8.0.1763-27.el8_10.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-filesystem@8.0.1763-27.el8_10?arch=noarch\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vim-2:8.0.1763-27.el8_10.src",
                "product": {
                  "name": "vim-2:8.0.1763-27.el8_10.src",
                  "product_id": "vim-2:8.0.1763-27.el8_10.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim@8.0.1763-27.el8_10?arch=src\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-X11-2:8.0.1763-27.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.aarch64"
        },
        "product_reference": "vim-X11-2:8.0.1763-27.el8_10.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-X11-2:8.0.1763-27.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.ppc64le"
        },
        "product_reference": "vim-X11-2:8.0.1763-27.el8_10.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-X11-2:8.0.1763-27.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.s390x"
        },
        "product_reference": "vim-X11-2:8.0.1763-27.el8_10.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-X11-2:8.0.1763-27.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.x86_64"
        },
        "product_reference": "vim-X11-2:8.0.1763-27.el8_10.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64"
        },
        "product_reference": "vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le"
        },
        "product_reference": "vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x"
        },
        "product_reference": "vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64"
        },
        "product_reference": "vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-common-2:8.0.1763-27.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.aarch64"
        },
        "product_reference": "vim-common-2:8.0.1763-27.el8_10.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-common-2:8.0.1763-27.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.ppc64le"
        },
        "product_reference": "vim-common-2:8.0.1763-27.el8_10.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-common-2:8.0.1763-27.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.s390x"
        },
        "product_reference": "vim-common-2:8.0.1763-27.el8_10.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-common-2:8.0.1763-27.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.x86_64"
        },
        "product_reference": "vim-common-2:8.0.1763-27.el8_10.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64"
        },
        "product_reference": "vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le"
        },
        "product_reference": "vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x"
        },
        "product_reference": "vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64"
        },
        "product_reference": "vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-debuginfo-2:8.0.1763-27.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64"
        },
        "product_reference": "vim-debuginfo-2:8.0.1763-27.el8_10.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le"
        },
        "product_reference": "vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-debuginfo-2:8.0.1763-27.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x"
        },
        "product_reference": "vim-debuginfo-2:8.0.1763-27.el8_10.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-debuginfo-2:8.0.1763-27.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64"
        },
        "product_reference": "vim-debuginfo-2:8.0.1763-27.el8_10.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-debugsource-2:8.0.1763-27.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64"
        },
        "product_reference": "vim-debugsource-2:8.0.1763-27.el8_10.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-debugsource-2:8.0.1763-27.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le"
        },
        "product_reference": "vim-debugsource-2:8.0.1763-27.el8_10.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-debugsource-2:8.0.1763-27.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x"
        },
        "product_reference": "vim-debugsource-2:8.0.1763-27.el8_10.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-debugsource-2:8.0.1763-27.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64"
        },
        "product_reference": "vim-debugsource-2:8.0.1763-27.el8_10.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-enhanced-2:8.0.1763-27.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.aarch64"
        },
        "product_reference": "vim-enhanced-2:8.0.1763-27.el8_10.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-enhanced-2:8.0.1763-27.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.ppc64le"
        },
        "product_reference": "vim-enhanced-2:8.0.1763-27.el8_10.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-enhanced-2:8.0.1763-27.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.s390x"
        },
        "product_reference": "vim-enhanced-2:8.0.1763-27.el8_10.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-enhanced-2:8.0.1763-27.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.x86_64"
        },
        "product_reference": "vim-enhanced-2:8.0.1763-27.el8_10.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64"
        },
        "product_reference": "vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le"
        },
        "product_reference": "vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x"
        },
        "product_reference": "vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64"
        },
        "product_reference": "vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-filesystem-2:8.0.1763-27.el8_10.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:vim-filesystem-2:8.0.1763-27.el8_10.noarch"
        },
        "product_reference": "vim-filesystem-2:8.0.1763-27.el8_10.noarch",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64"
        },
        "product_reference": "vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le"
        },
        "product_reference": "vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x"
        },
        "product_reference": "vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64"
        },
        "product_reference": "vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-2:8.0.1763-27.el8_10.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:vim-2:8.0.1763-27.el8_10.src"
        },
        "product_reference": "vim-2:8.0.1763-27.el8_10.src",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64"
        },
        "product_reference": "vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le"
        },
        "product_reference": "vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x"
        },
        "product_reference": "vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64"
        },
        "product_reference": "vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64"
        },
        "product_reference": "vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le"
        },
        "product_reference": "vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x"
        },
        "product_reference": "vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64"
        },
        "product_reference": "vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-debuginfo-2:8.0.1763-27.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64"
        },
        "product_reference": "vim-debuginfo-2:8.0.1763-27.el8_10.aarch64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le"
        },
        "product_reference": "vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-debuginfo-2:8.0.1763-27.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x"
        },
        "product_reference": "vim-debuginfo-2:8.0.1763-27.el8_10.s390x",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-debuginfo-2:8.0.1763-27.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64"
        },
        "product_reference": "vim-debuginfo-2:8.0.1763-27.el8_10.x86_64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-debugsource-2:8.0.1763-27.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64"
        },
        "product_reference": "vim-debugsource-2:8.0.1763-27.el8_10.aarch64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-debugsource-2:8.0.1763-27.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le"
        },
        "product_reference": "vim-debugsource-2:8.0.1763-27.el8_10.ppc64le",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-debugsource-2:8.0.1763-27.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x"
        },
        "product_reference": "vim-debugsource-2:8.0.1763-27.el8_10.s390x",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-debugsource-2:8.0.1763-27.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64"
        },
        "product_reference": "vim-debugsource-2:8.0.1763-27.el8_10.x86_64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64"
        },
        "product_reference": "vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le"
        },
        "product_reference": "vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x"
        },
        "product_reference": "vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64"
        },
        "product_reference": "vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-minimal-2:8.0.1763-27.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.aarch64"
        },
        "product_reference": "vim-minimal-2:8.0.1763-27.el8_10.aarch64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-minimal-2:8.0.1763-27.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.ppc64le"
        },
        "product_reference": "vim-minimal-2:8.0.1763-27.el8_10.ppc64le",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-minimal-2:8.0.1763-27.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.s390x"
        },
        "product_reference": "vim-minimal-2:8.0.1763-27.el8_10.s390x",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-minimal-2:8.0.1763-27.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.x86_64"
        },
        "product_reference": "vim-minimal-2:8.0.1763-27.el8_10.x86_64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64"
        },
        "product_reference": "vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le"
        },
        "product_reference": "vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x"
        },
        "product_reference": "vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
          "product_id": "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64"
        },
        "product_reference": "vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64",
        "relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-46483",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "discovery_date": "2026-05-15T16:00:58.827425+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-filesystem-2:8.0.1763-27.el8_10.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2477915"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Vim. When decompressing .tgz archives, the Vimuntar function builds shell commands using shellescape() without the {special} flag. This allows a specially crafted archive filename to trigger Vim cmdline-special expansion and execute arbitrary commands in the context of the current user.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vim: command injection when decompressing .tgz archives",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to convince a user to decompress a .tgz archive with a specially crafted filename. Additionally, possible arbitrary command execution is restricted to the context of the user running Vim. These conditions limit the exposure of this vulnerability and the potential of a full system compromise. Due to these reasons, this flaw has been rated with a moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-2:8.0.1763-27.el8_10.src"
        ],
        "known_not_affected": [
          "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-filesystem-2:8.0.1763-27.el8_10.noarch",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-46483"
        },
        {
          "category": "external",
          "summary": "RHBZ#2477915",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477915"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-46483",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-46483"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46483",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46483"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/commit/3fb5e58fbc63d86a3e65f1a141b0d67af2aa38a1",
          "url": "https://github.com/vim/vim/commit/3fb5e58fbc63d86a3e65f1a141b0d67af2aa38a1"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/releases/tag/v9.2.0479",
          "url": "https://github.com/vim/vim/releases/tag/v9.2.0479"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/security/advisories/GHSA-2fpv-9ff7-xg5w",
          "url": "https://github.com/vim/vim/security/advisories/GHSA-2fpv-9ff7-xg5w"
        }
      ],
      "release_date": "2026-05-15T14:57:31.872000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-13T07:56:23+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-2:8.0.1763-27.el8_10.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:38510"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, do not decompress untrusted .tgz archives with the Vimuntar command. Use \u0027tar -x -z -f\u0027 directly, instead.",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-filesystem-2:8.0.1763-27.el8_10.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-2:8.0.1763-27.el8_10.src",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-filesystem-2:8.0.1763-27.el8_10.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-2:8.0.1763-27.el8_10.src",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "vim: command injection when decompressing .tgz archives"
    },
    {
      "cve": "CVE-2026-47162",
      "cwe": {
        "id": "CWE-140",
        "name": "Improper Neutralization of Delimiters"
      },
      "discovery_date": "2026-06-11T19:00:56.050612+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-filesystem-2:8.0.1763-27.el8_10.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2487964"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Vim, an open-source text editor. This vulnerability, located in the netrw plugin, involves a code injection issue when the editor processes directory paths. A malicious directory name, if crafted by an attacker, could bypass security measures and allow for the execution of unauthorized commands. This could lead to arbitrary code execution on the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vim: Vim: Arbitrary Code Execution via crafted directory names",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-2:8.0.1763-27.el8_10.src"
        ],
        "known_not_affected": [
          "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-filesystem-2:8.0.1763-27.el8_10.noarch",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-47162"
        },
        {
          "category": "external",
          "summary": "RHBZ#2487964",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487964"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-47162",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-47162"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47162",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47162"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/commit/f08ab2f4d7d2947c8dd6c179ae08ee6146a2694b",
          "url": "https://github.com/vim/vim/commit/f08ab2f4d7d2947c8dd6c179ae08ee6146a2694b"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/releases/tag/v9.2.0495",
          "url": "https://github.com/vim/vim/releases/tag/v9.2.0495"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/security/advisories/GHSA-crm5-rh6j-2c7c",
          "url": "https://github.com/vim/vim/security/advisories/GHSA-crm5-rh6j-2c7c"
        }
      ],
      "release_date": "2026-06-11T18:32:14.471000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-13T07:56:23+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-2:8.0.1763-27.el8_10.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:38510"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-filesystem-2:8.0.1763-27.el8_10.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-2:8.0.1763-27.el8_10.src",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "vim: Vim: Arbitrary Code Execution via crafted directory names"
    },
    {
      "cve": "CVE-2026-47167",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
      },
      "discovery_date": "2026-06-11T19:02:45.999423+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-filesystem-2:8.0.1763-27.el8_10.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2487996"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Vim, a command-line text editor. This vulnerability, identified as a code injection, affects the cucumber filetype plugin when Vim is configured with Ruby support. An attacker could exploit this by creating a malicious repository containing specially crafted step-definition patterns. If a user opens this repository and triggers a specific function, the crafted patterns are unsafely processed, potentially allowing the attacker to execute unauthorized commands on the user\u0027s system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vim: Vim: Arbitrary code execution via crafted step-definition patterns",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important vulnerability in Vim\u0027s cucumber filetype plugin, when configured with Ruby support, allows for arbitrary code execution. An attacker could exploit this by convincing a user to open a specially crafted repository and trigger a specific step-jump mapping, leading to local command execution. This risk is contingent on user interaction with untrusted content and the presence of the Ruby-enabled cucumber plugin.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-2:8.0.1763-27.el8_10.src"
        ],
        "known_not_affected": [
          "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-filesystem-2:8.0.1763-27.el8_10.noarch",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-47167"
        },
        {
          "category": "external",
          "summary": "RHBZ#2487996",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487996"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-47167",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-47167"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47167",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47167"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/commit/a65a52d684bc58535ad28a4ae824d22e76399934",
          "url": "https://github.com/vim/vim/commit/a65a52d684bc58535ad28a4ae824d22e76399934"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/releases/tag/v9.2.0496",
          "url": "https://github.com/vim/vim/releases/tag/v9.2.0496"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/security/advisories/GHSA-4473-94jm-w5x9",
          "url": "https://github.com/vim/vim/security/advisories/GHSA-4473-94jm-w5x9"
        }
      ],
      "release_date": "2026-06-11T18:31:44.286000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-13T07:56:23+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-2:8.0.1763-27.el8_10.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:38510"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, users should exercise caution when opening untrusted files or repositories with Vim, particularly those that might trigger the `cucumber` filetype plugin. Avoiding interaction with untrusted content can prevent the execution of malicious step-definition patterns.",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-filesystem-2:8.0.1763-27.el8_10.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-2:8.0.1763-27.el8_10.src",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-filesystem-2:8.0.1763-27.el8_10.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-2:8.0.1763-27.el8_10.src",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "vim: Vim: Arbitrary code execution via crafted step-definition patterns"
    },
    {
      "cve": "CVE-2026-52858",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
      },
      "discovery_date": "2026-06-11T19:01:57.042099+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-filesystem-2:8.0.1763-27.el8_10.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2487981"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Vim, a widely used command-line text editor. This vulnerability allows a local attacker to execute arbitrary code on the system. By opening a specially crafted Python file and then triggering the omni-completion feature, the attacker can cause Vim to run malicious code from a sibling Python package. This could lead to a complete compromise of the user\u0027s system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vim: Vim: Arbitrary code execution via Python omni-completion",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important vulnerability in Vim that allows a local attacker to achieve arbitrary code execution. The flaw occurs when a user opens a specially crafted Python file and invokes omni-completion, leading to the execution of malicious code from a co-located Python package. This risk is present in Red Hat Enterprise Linux and other products where Vim is deployed with Python omni-completion enabled, potentially compromising the editing user\u0027s system.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-2:8.0.1763-27.el8_10.src"
        ],
        "known_not_affected": [
          "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-filesystem-2:8.0.1763-27.el8_10.noarch",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.x86_64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x",
          "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-52858"
        },
        {
          "category": "external",
          "summary": "RHBZ#2487981",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487981"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-52858",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-52858"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-52858",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52858"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/commit/4b850457e12e1a678dd209f2868154f7553cbf8d",
          "url": "https://github.com/vim/vim/commit/4b850457e12e1a678dd209f2868154f7553cbf8d"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/releases/tag/v9.2.0561",
          "url": "https://github.com/vim/vim/releases/tag/v9.2.0561"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/security/advisories/GHSA-52mc-rq6p-rc7c",
          "url": "https://github.com/vim/vim/security/advisories/GHSA-52mc-rq6p-rc7c"
        }
      ],
      "release_date": "2026-06-11T18:32:32.722000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-13T07:56:23+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-2:8.0.1763-27.el8_10.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:38510"
        },
        {
          "category": "workaround",
          "details": "Users can mitigate this vulnerability by disabling Python omni-completion in Vim if it is not essential for their workflow. This prevents the execution of untrusted Python code when opening hostile files. To disable this feature, ensure that the `omnifunc` option in your Vim configuration (e.g., `~/.vimrc`) is not set to `pythoncomplete#Complete` or `python3complete#Complete`. Alternatively, users should avoid invoking omni-completion (`Ctrl-X Ctrl-O`) on Python files from untrusted sources. Disabling Python omni-completion may affect Python development functionality within Vim.",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-filesystem-2:8.0.1763-27.el8_10.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-2:8.0.1763-27.el8_10.src",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-filesystem-2:8.0.1763-27.el8_10.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-2:8.0.1763-27.el8_10.src",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-X11-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-common-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-debugsource-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-enhanced-debuginfo-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-2:8.0.1763-27.el8_10.x86_64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.aarch64",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.ppc64le",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.s390x",
            "BaseOS-8.10.0.Z.MAIN.EUS:vim-minimal-debuginfo-2:8.0.1763-27.el8_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "vim: Vim: Arbitrary code execution via Python omni-completion"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.