RHSA-2026:70818
Vulnerability from csaf_redhat - Published: 2026-09-23 16:30 - Updated: 2026-09-23 22:19Summary
Red Hat Security Advisory: vim security update
Severity
Important
Notes
Topic: An update for vim is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Vim (Vi IMproved) is an updated and improved version of the vi editor.
Security Fix(es):
* vim: Vim: Arbitrary Code Execution via crafted directory names (CVE-2026-47162)
* vim: Vim: Arbitrary code execution via Python omni-completion (CVE-2026-52858)
* vim: Vim: Arbitrary code execution via crafted step-definition patterns (CVE-2026-47167)
* vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo() (CVE-2026-57455)
* vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion (CVE-2026-57456)
* vim: Vim: Out-of-bounds Write in Spell File Word Count (CVE-2026-55693)
* vim: Vim: Arbitrary code execution via crafted PHP file in omni-completion (CVE-2026-59856)
* vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion (CVE-2026-59858)
* vim: Vim: Arbitrary command execution via crafted vimball (CVE-2026-73076)
* vim: Vim: Heap buffer overflow allows arbitrary code execution (CVE-2026-73072)
* vim: Vim: Arbitrary Code Execution via Crafted Netrw Menu Entries (CVE-2026-73078)
* vim: Vim: Arbitrary Code Execution via Insecure Shell Command Handling (CVE-2026-73077)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Vim, an open-source text editor. This vulnerability, located in the netrw plugin, involves a code injection issue when the editor processes directory paths. A malicious directory name, if crafted by an attacker, could bypass security measures and allow for the execution of unauthorized commands. This could lead to arbitrary code execution on the affected system.
7.3 (High)
Affected products
Fixed
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in Vim, a command-line text editor. This vulnerability, identified as a code injection, affects the cucumber filetype plugin when Vim is configured with Ruby support. An attacker could exploit this by creating a malicious repository containing specially crafted step-definition patterns. If a user opens this repository and triggers a specific function, the crafted patterns are unsafely processed, potentially allowing the attacker to execute unauthorized commands on the user's system.
7.3 (High)
Affected products
Fixed
66 products, the same list as for
CVE-2026-47162
Threats
Impact
Important
A flaw was found in Vim, a widely used command-line text editor. This vulnerability allows a local attacker to execute arbitrary code on the system. By opening a specially crafted Python file and then triggering the omni-completion feature, the attacker can cause Vim to run malicious code from a sibling Python package. This could lead to a complete compromise of the user's system.
7.3 (High)
Affected products
Fixed
66 products, the same list as for
CVE-2026-47162
Threats
Impact
Important
A flaw was found in Vim, an open-source command-line text editor. A remote attacker could exploit this vulnerability by tricking a user into loading a specially crafted spell file. When the user invokes spell suggestion, the editor attempts to process the malicious file, leading to an out-of-bounds write that corrupts memory and causes the application to crash, resulting in a denial of service.
7.3 (High)
Affected products
Fixed
66 products, the same list as for
CVE-2026-47162
Threats
Impact
Moderate
A memory corruption flaw in Vim allows an attacker to cause a Denial of Service (DoS). When a SOFO-based spell language is active, providing an excessively long word to the spell checker triggers a stack out-of-bounds write in the spell_soundfold_sofo() function, causing the editor to crash.
4.7 (Medium)
Affected products
Fixed
66 products, the same list as for
CVE-2026-47162
Threats
Impact
Moderate
There is a security flaw in Vim. If you use Vim to open a malicious file written by a hacker, and you use the auto-complete feature while typing, the file can secretly force your computer to run unauthorized commands or malware.
7.8 (High)
Affected products
Fixed
66 products, the same list as for
CVE-2026-47162
Threats
Impact
Important
A flaw was found in Vim, an open-source command-line text editor. The PHP omni-completion script improperly handles specially crafted input. When a victim opens a malicious PHP file and invokes omni-completion, an unescaped class or trait name can be interpreted as Ex commands. This allows a remote attacker to achieve arbitrary operating-system command execution.
5.3 (Medium)
Affected products
Fixed
66 products, the same list as for
CVE-2026-47162
Threats
Impact
Moderate
A command injection vulnerability in Vim's C omni-completion script allows an attacker to execute arbitrary commands if a user is tricked into opening a maliciously crafted tags file and manually invoking the autocomplete feature.
6.5 (Medium)
Affected products
Fixed
66 products, the same list as for
CVE-2026-47162
Threats
Impact
Moderate
A heap buffer overflow in Vim allows a local attacker to cause a denial of service or potentially execute arbitrary code. The flaw is triggered by processing a specially crafted spell file, where the set_sofo() function fails to reset internal data between sections, leading to an out-of-bounds write.
7.8 (High)
Affected products
Fixed
66 products, the same list as for
CVE-2026-47162
Threats
Impact
Important
A vulnerability in Vim allows remote attackers to execute arbitrary commands by crafting a malicious .VimballRecord file that injects OS commands executed when processed by the vimball#RmVimball() function.
7.3 (High)
Affected products
Fixed
66 products, the same list as for
CVE-2026-47162
Threats
Impact
Important
A vulnerability in Vim's shell script plugins (sh.vim, zsh.vim, ps1.vim) allows arbitrary code execution if a user selects maliciously crafted text in Visual mode and triggers a keyword lookup, due to improperly escaped shell metacharacters.
7.3 (High)
Affected products
Fixed
66 products, the same list as for
CVE-2026-47162
Threats
Impact
Important
A flaw in Vim's netrw plugin fails to sanitize special characters in directory paths when creating GUI menu entries. Browsing or bookmarking a maliciously crafted path in GUI Vim allows attackers to execute arbitrary OS commands as the running user.
8.8 (High)
Affected products
Fixed
66 products, the same list as for
CVE-2026-47162
Threats
Impact
Important
References
94 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for vim is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Vim (Vi IMproved) is an updated and improved version of the vi editor.\n\nSecurity Fix(es):\n\n* vim: Vim: Arbitrary Code Execution via crafted directory names (CVE-2026-47162)\n\n* vim: Vim: Arbitrary code execution via Python omni-completion (CVE-2026-52858)\n\n* vim: Vim: Arbitrary code execution via crafted step-definition patterns (CVE-2026-47167)\n\n* vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo() (CVE-2026-57455)\n\n* vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion (CVE-2026-57456)\n\n* vim: Vim: Out-of-bounds Write in Spell File Word Count (CVE-2026-55693)\n\n* vim: Vim: Arbitrary code execution via crafted PHP file in omni-completion (CVE-2026-59856)\n\n* vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion (CVE-2026-59858)\n\n* vim: Vim: Arbitrary command execution via crafted vimball (CVE-2026-73076)\n\n* vim: Vim: Heap buffer overflow allows arbitrary code execution (CVE-2026-73072)\n\n* vim: Vim: Arbitrary Code Execution via Crafted Netrw Menu Entries (CVE-2026-73078)\n\n* vim: Vim: Arbitrary Code Execution via Insecure Shell Command Handling (CVE-2026-73077)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:70818",
"url": "https://access.redhat.com/errata/RHSA-2026:70818"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2487964",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487964"
},
{
"category": "external",
"summary": "2487981",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487981"
},
{
"category": "external",
"summary": "2487996",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487996"
},
{
"category": "external",
"summary": "2492968",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492968"
},
{
"category": "external",
"summary": "2492972",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492972"
},
{
"category": "external",
"summary": "2492980",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492980"
},
{
"category": "external",
"summary": "2498867",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498867"
},
{
"category": "external",
"summary": "2498868",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498868"
},
{
"category": "external",
"summary": "2514034",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514034"
},
{
"category": "external",
"summary": "2514037",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514037"
},
{
"category": "external",
"summary": "2514058",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514058"
},
{
"category": "external",
"summary": "2514065",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514065"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_70818.json"
}
],
"title": "Red Hat Security Advisory: vim security update",
"tracking": {
"current_release_date": "2026-09-23T22:19:01+00:00",
"generator": {
"date": "2026-09-23T22:19:01+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.0"
}
},
"id": "RHSA-2026:70818",
"initial_release_date": "2026-09-23T16:30:47+00:00",
"revision_history": [
{
"date": "2026-09-23T16:30:47+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-23T16:30:47+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-23T22:19:01+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product": {
"name": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:9.6::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_eus:9.6::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"product": {
"name": "vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"product_id": "vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-X11@8.2.2637-22.el9_6.4?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"product": {
"name": "vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"product_id": "vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-common@8.2.2637-22.el9_6.4?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"product": {
"name": "vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"product_id": "vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-enhanced@8.2.2637-22.el9_6.4?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"product": {
"name": "vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"product_id": "vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-debugsource@8.2.2637-22.el9_6.4?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"product": {
"name": "vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"product_id": "vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-X11-debuginfo@8.2.2637-22.el9_6.4?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"product": {
"name": "vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"product_id": "vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-common-debuginfo@8.2.2637-22.el9_6.4?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"product": {
"name": "vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"product_id": "vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-debuginfo@8.2.2637-22.el9_6.4?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"product": {
"name": "vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"product_id": "vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-enhanced-debuginfo@8.2.2637-22.el9_6.4?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"product": {
"name": "vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"product_id": "vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-minimal-debuginfo@8.2.2637-22.el9_6.4?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"product": {
"name": "vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"product_id": "vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-minimal@8.2.2637-22.el9_6.4?arch=aarch64\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"product": {
"name": "vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"product_id": "vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-X11@8.2.2637-22.el9_6.4?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"product": {
"name": "vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"product_id": "vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-common@8.2.2637-22.el9_6.4?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"product": {
"name": "vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"product_id": "vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-enhanced@8.2.2637-22.el9_6.4?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"product": {
"name": "vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"product_id": "vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-debugsource@8.2.2637-22.el9_6.4?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"product": {
"name": "vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"product_id": "vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-X11-debuginfo@8.2.2637-22.el9_6.4?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"product": {
"name": "vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"product_id": "vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-common-debuginfo@8.2.2637-22.el9_6.4?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"product": {
"name": "vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"product_id": "vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-debuginfo@8.2.2637-22.el9_6.4?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"product": {
"name": "vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"product_id": "vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-enhanced-debuginfo@8.2.2637-22.el9_6.4?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"product": {
"name": "vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"product_id": "vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-minimal-debuginfo@8.2.2637-22.el9_6.4?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"product": {
"name": "vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"product_id": "vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-minimal@8.2.2637-22.el9_6.4?arch=ppc64le\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"product": {
"name": "vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"product_id": "vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-X11@8.2.2637-22.el9_6.4?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "vim-common-2:8.2.2637-22.el9_6.4.s390x",
"product": {
"name": "vim-common-2:8.2.2637-22.el9_6.4.s390x",
"product_id": "vim-common-2:8.2.2637-22.el9_6.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-common@8.2.2637-22.el9_6.4?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"product": {
"name": "vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"product_id": "vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-enhanced@8.2.2637-22.el9_6.4?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"product": {
"name": "vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"product_id": "vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-debugsource@8.2.2637-22.el9_6.4?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"product": {
"name": "vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"product_id": "vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-X11-debuginfo@8.2.2637-22.el9_6.4?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"product": {
"name": "vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"product_id": "vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-common-debuginfo@8.2.2637-22.el9_6.4?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"product": {
"name": "vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"product_id": "vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-debuginfo@8.2.2637-22.el9_6.4?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"product": {
"name": "vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"product_id": "vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-enhanced-debuginfo@8.2.2637-22.el9_6.4?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"product": {
"name": "vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"product_id": "vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-minimal-debuginfo@8.2.2637-22.el9_6.4?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"product": {
"name": "vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"product_id": "vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-minimal@8.2.2637-22.el9_6.4?arch=s390x\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"product": {
"name": "vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"product_id": "vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-X11@8.2.2637-22.el9_6.4?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"product": {
"name": "vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"product_id": "vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-common@8.2.2637-22.el9_6.4?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"product": {
"name": "vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"product_id": "vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-enhanced@8.2.2637-22.el9_6.4?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"product": {
"name": "vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"product_id": "vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-debugsource@8.2.2637-22.el9_6.4?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"product": {
"name": "vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"product_id": "vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-X11-debuginfo@8.2.2637-22.el9_6.4?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"product": {
"name": "vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"product_id": "vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-common-debuginfo@8.2.2637-22.el9_6.4?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"product": {
"name": "vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"product_id": "vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-debuginfo@8.2.2637-22.el9_6.4?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"product": {
"name": "vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"product_id": "vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-enhanced-debuginfo@8.2.2637-22.el9_6.4?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"product": {
"name": "vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"product_id": "vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-minimal-debuginfo@8.2.2637-22.el9_6.4?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"product": {
"name": "vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"product_id": "vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-minimal@8.2.2637-22.el9_6.4?arch=x86_64\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "vim-2:8.2.2637-22.el9_6.4.src",
"product": {
"name": "vim-2:8.2.2637-22.el9_6.4.src",
"product_id": "vim-2:8.2.2637-22.el9_6.4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim@8.2.2637-22.el9_6.4?arch=src\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"product": {
"name": "vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"product_id": "vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vim-filesystem@8.2.2637-22.el9_6.4?arch=noarch\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-X11-2:8.2.2637-22.el9_6.4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64"
},
"product_reference": "vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-X11-2:8.2.2637-22.el9_6.4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le"
},
"product_reference": "vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-X11-2:8.2.2637-22.el9_6.4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x"
},
"product_reference": "vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-X11-2:8.2.2637-22.el9_6.4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64"
},
"product_reference": "vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64"
},
"product_reference": "vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le"
},
"product_reference": "vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x"
},
"product_reference": "vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
},
"product_reference": "vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-common-2:8.2.2637-22.el9_6.4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64"
},
"product_reference": "vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-common-2:8.2.2637-22.el9_6.4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le"
},
"product_reference": "vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-common-2:8.2.2637-22.el9_6.4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x"
},
"product_reference": "vim-common-2:8.2.2637-22.el9_6.4.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-common-2:8.2.2637-22.el9_6.4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64"
},
"product_reference": "vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64"
},
"product_reference": "vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le"
},
"product_reference": "vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x"
},
"product_reference": "vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
},
"product_reference": "vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64"
},
"product_reference": "vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le"
},
"product_reference": "vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x"
},
"product_reference": "vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
},
"product_reference": "vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64"
},
"product_reference": "vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le"
},
"product_reference": "vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-debugsource-2:8.2.2637-22.el9_6.4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x"
},
"product_reference": "vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64"
},
"product_reference": "vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64"
},
"product_reference": "vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le"
},
"product_reference": "vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-enhanced-2:8.2.2637-22.el9_6.4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x"
},
"product_reference": "vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64"
},
"product_reference": "vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64"
},
"product_reference": "vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le"
},
"product_reference": "vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x"
},
"product_reference": "vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
},
"product_reference": "vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64"
},
"product_reference": "vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le"
},
"product_reference": "vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x"
},
"product_reference": "vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
},
"product_reference": "vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-2:8.2.2637-22.el9_6.4.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src"
},
"product_reference": "vim-2:8.2.2637-22.el9_6.4.src",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64"
},
"product_reference": "vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le"
},
"product_reference": "vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x"
},
"product_reference": "vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
},
"product_reference": "vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64"
},
"product_reference": "vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le"
},
"product_reference": "vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x"
},
"product_reference": "vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
},
"product_reference": "vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64"
},
"product_reference": "vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le"
},
"product_reference": "vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x"
},
"product_reference": "vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
},
"product_reference": "vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64"
},
"product_reference": "vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le"
},
"product_reference": "vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-debugsource-2:8.2.2637-22.el9_6.4.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x"
},
"product_reference": "vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64"
},
"product_reference": "vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64"
},
"product_reference": "vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le"
},
"product_reference": "vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x"
},
"product_reference": "vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
},
"product_reference": "vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-filesystem-2:8.2.2637-22.el9_6.4.noarch as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch"
},
"product_reference": "vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-minimal-2:8.2.2637-22.el9_6.4.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64"
},
"product_reference": "vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le"
},
"product_reference": "vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-minimal-2:8.2.2637-22.el9_6.4.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x"
},
"product_reference": "vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-minimal-2:8.2.2637-22.el9_6.4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64"
},
"product_reference": "vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64"
},
"product_reference": "vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le"
},
"product_reference": "vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x"
},
"product_reference": "vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"product_id": "BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
},
"product_reference": "vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"relates_to_product_reference": "BaseOS-9.6.0.Z.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-47162",
"cwe": {
"id": "CWE-140",
"name": "Improper Neutralization of Delimiters"
},
"discovery_date": "2026-06-11T19:00:56.050612+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487964"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Vim, an open-source text editor. This vulnerability, located in the netrw plugin, involves a code injection issue when the editor processes directory paths. A malicious directory name, if crafted by an attacker, could bypass security measures and allow for the execution of unauthorized commands. This could lead to arbitrary code execution on the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Arbitrary Code Execution via crafted directory names",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47162"
},
{
"category": "external",
"summary": "RHBZ#2487964",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487964"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47162",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47162"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47162",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47162"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/f08ab2f4d7d2947c8dd6c179ae08ee6146a2694b",
"url": "https://github.com/vim/vim/commit/f08ab2f4d7d2947c8dd6c179ae08ee6146a2694b"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/releases/tag/v9.2.0495",
"url": "https://github.com/vim/vim/releases/tag/v9.2.0495"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-crm5-rh6j-2c7c",
"url": "https://github.com/vim/vim/security/advisories/GHSA-crm5-rh6j-2c7c"
}
],
"release_date": "2026-06-11T18:32:14.471000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-23T16:30:47+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70818"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vim: Vim: Arbitrary Code Execution via crafted directory names"
},
{
"cve": "CVE-2026-47167",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-06-11T19:02:45.999423+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487996"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Vim, a command-line text editor. This vulnerability, identified as a code injection, affects the cucumber filetype plugin when Vim is configured with Ruby support. An attacker could exploit this by creating a malicious repository containing specially crafted step-definition patterns. If a user opens this repository and triggers a specific function, the crafted patterns are unsafely processed, potentially allowing the attacker to execute unauthorized commands on the user\u0027s system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Arbitrary code execution via crafted step-definition patterns",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Vim\u0027s cucumber filetype plugin, when configured with Ruby support, allows for arbitrary code execution. An attacker could exploit this by convincing a user to open a specially crafted repository and trigger a specific step-jump mapping, leading to local command execution. This risk is contingent on user interaction with untrusted content and the presence of the Ruby-enabled cucumber plugin.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47167"
},
{
"category": "external",
"summary": "RHBZ#2487996",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487996"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47167",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47167"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47167",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47167"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/a65a52d684bc58535ad28a4ae824d22e76399934",
"url": "https://github.com/vim/vim/commit/a65a52d684bc58535ad28a4ae824d22e76399934"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/releases/tag/v9.2.0496",
"url": "https://github.com/vim/vim/releases/tag/v9.2.0496"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-4473-94jm-w5x9",
"url": "https://github.com/vim/vim/security/advisories/GHSA-4473-94jm-w5x9"
}
],
"release_date": "2026-06-11T18:31:44.286000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-23T16:30:47+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70818"
},
{
"category": "workaround",
"details": "To mitigate this issue, users should exercise caution when opening untrusted files or repositories with Vim, particularly those that might trigger the `cucumber` filetype plugin. Avoiding interaction with untrusted content can prevent the execution of malicious step-definition patterns.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vim: Vim: Arbitrary code execution via crafted step-definition patterns"
},
{
"cve": "CVE-2026-52858",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-06-11T19:01:57.042099+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487981"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Vim, a widely used command-line text editor. This vulnerability allows a local attacker to execute arbitrary code on the system. By opening a specially crafted Python file and then triggering the omni-completion feature, the attacker can cause Vim to run malicious code from a sibling Python package. This could lead to a complete compromise of the user\u0027s system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Arbitrary code execution via Python omni-completion",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability in Vim that allows a local attacker to achieve arbitrary code execution. The flaw occurs when a user opens a specially crafted Python file and invokes omni-completion, leading to the execution of malicious code from a co-located Python package. This risk is present in Red Hat Enterprise Linux and other products where Vim is deployed with Python omni-completion enabled, potentially compromising the editing user\u0027s system.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-52858"
},
{
"category": "external",
"summary": "RHBZ#2487981",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487981"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-52858",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-52858"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-52858",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52858"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/4b850457e12e1a678dd209f2868154f7553cbf8d",
"url": "https://github.com/vim/vim/commit/4b850457e12e1a678dd209f2868154f7553cbf8d"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/releases/tag/v9.2.0561",
"url": "https://github.com/vim/vim/releases/tag/v9.2.0561"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-52mc-rq6p-rc7c",
"url": "https://github.com/vim/vim/security/advisories/GHSA-52mc-rq6p-rc7c"
}
],
"release_date": "2026-06-11T18:32:32.722000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-23T16:30:47+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70818"
},
{
"category": "workaround",
"details": "Users can mitigate this vulnerability by disabling Python omni-completion in Vim if it is not essential for their workflow. This prevents the execution of untrusted Python code when opening hostile files. To disable this feature, ensure that the `omnifunc` option in your Vim configuration (e.g., `~/.vimrc`) is not set to `pythoncomplete#Complete` or `python3complete#Complete`. Alternatively, users should avoid invoking omni-completion (`Ctrl-X Ctrl-O`) on Python files from untrusted sources. Disabling Python omni-completion may affect Python development functionality within Vim.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vim: Vim: Arbitrary code execution via Python omni-completion"
},
{
"cve": "CVE-2026-55693",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-06-25T16:02:21.870241+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492980"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Vim, an open-source command-line text editor. A remote attacker could exploit this vulnerability by tricking a user into loading a specially crafted spell file. When the user invokes spell suggestion, the editor attempts to process the malicious file, leading to an out-of-bounds write that corrupts memory and causes the application to crash, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Out-of-bounds Write in Spell File Word Count",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact vulnerability in Vim\u0027s spell suggestion feature allows an attacker to cause a denial of service. By tricking a user into loading a specially crafted spell file and invoking spell suggestion, an out-of-bounds write can occur, leading to a crash of the editor. This requires user interaction and a malicious file, limiting its immediate exploitability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-55693"
},
{
"category": "external",
"summary": "RHBZ#2492980",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492980"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-55693",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55693"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55693",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55693"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/a80874d9b84a01040e3d1aef2d4a59e1934dafb7",
"url": "https://github.com/vim/vim/commit/a80874d9b84a01040e3d1aef2d4a59e1934dafb7"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/releases/tag/v9.2.0653",
"url": "https://github.com/vim/vim/releases/tag/v9.2.0653"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-wgh4-64f7-q3jq",
"url": "https://github.com/vim/vim/security/advisories/GHSA-wgh4-64f7-q3jq"
}
],
"release_date": "2026-06-25T15:34:33.424000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-23T16:30:47+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70818"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vim: Vim: Out-of-bounds Write in Spell File Word Count"
},
{
"cve": "CVE-2026-57455",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-06-25T16:01:18.343208+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492968"
}
],
"notes": [
{
"category": "description",
"text": "A memory corruption flaw in Vim allows an attacker to cause a Denial of Service (DoS). When a SOFO-based spell language is active, providing an excessively long word to the spell checker triggers a stack out-of-bounds write in the spell_soundfold_sofo() function, causing the editor to crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact flaw in Vim, a command-line text editor, is due to a stack out-of-bounds write in the spell checker. Exploitation requires a user to open a specially crafted file or encounter a long word via spell suggestion while a SOFO-based spell language is active, leading to a Denial of Service. This is not a default configuration in most Red Hat environments, limiting the attack surface.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-57455"
},
{
"category": "external",
"summary": "RHBZ#2492968",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492968"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-57455",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57455"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-57455",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-57455"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/497f931f85339d175d7f69588dd249e8ccfed41b",
"url": "https://github.com/vim/vim/commit/497f931f85339d175d7f69588dd249e8ccfed41b"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/releases/tag/v9.2.0698",
"url": "https://github.com/vim/vim/releases/tag/v9.2.0698"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-q8mh-6qm3-25g4",
"url": "https://github.com/vim/vim/security/advisories/GHSA-q8mh-6qm3-25g4"
}
],
"release_date": "2026-06-25T15:22:37.949000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-23T16:30:47+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70818"
},
{
"category": "workaround",
"details": "To mitigate this issue disable spell checking or avoid using SOFO-based spell files. This can be achieved globally by adding set nospell to your ~/.vimrc configuration file. Ensure your systems utilize standard UTF-8 encoding. This flaw is strictly confined to legacy 8-bit encodings and cannot be triggered under default Red Hat configurations.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo()"
},
{
"cve": "CVE-2026-57456",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-06-25T16:01:37.648886+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492972"
}
],
"notes": [
{
"category": "description",
"text": "There is a security flaw in Vim. If you use Vim to open a malicious file written by a hacker, and you use the auto-complete feature while typing, the file can secretly force your computer to run unauthorized commands or malware.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is rated as Important. A vulnerability in Vim\u0027s Python omni-completion feature allows for arbitrary code execution. By opening a specially crafted file, a local attacker could execute arbitrary Python code due to improper handling of docstrings during omni-completion, leading to a compromise of the system where Vim is running.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-57456"
},
{
"category": "external",
"summary": "RHBZ#2492972",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492972"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-57456",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57456"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-57456",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-57456"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/cce141c42740f122dd8486ae04e21c2a81016ba8",
"url": "https://github.com/vim/vim/commit/cce141c42740f122dd8486ae04e21c2a81016ba8"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/releases/tag/v9.2.0699",
"url": "https://github.com/vim/vim/releases/tag/v9.2.0699"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-ppj8-wqjf-6fp3",
"url": "https://github.com/vim/vim/security/advisories/GHSA-ppj8-wqjf-6fp3"
}
],
"release_date": "2026-06-25T15:16:16.015000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-23T16:30:47+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70818"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, users should avoid opening untrusted Python files or using Python omni-completion on such files. If Python omni-completion is not required, it can be disabled by adding `autocmd FileType python setlocal omnifunc=` to your `.vimrc` file. This will prevent the vulnerable code from being executed. Disabling Python omni-completion will remove the ability to use `Ctrl-X Ctrl-O` for Python code completion. A restart of Vim is required for the changes to take effect.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion"
},
{
"cve": "CVE-2026-59856",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-07-09T23:01:40.406872+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498867"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Vim, an open-source command-line text editor. The PHP omni-completion script improperly handles specially crafted input. When a victim opens a malicious PHP file and invokes omni-completion, an unescaped class or trait name can be interpreted as Ex commands. This allows a remote attacker to achieve arbitrary operating-system command execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Arbitrary code execution via crafted PHP file in omni-completion",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security has rated this vulnerability as having a Moderate impact. While successful exploitation allows for arbitrary operating-system command execution when a user opens a crafted PHP file and triggers omni-completion, this feature is disabled by default in Red Hat products. The requirement for a non-default configuration, combined with mandatory user interaction, significantly reduces the real-world risk.\"",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59856"
},
{
"category": "external",
"summary": "RHBZ#2498867",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498867"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59856",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59856"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59856",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59856"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/43afc581a37a35762dd0ef292f038b9dc5680a24",
"url": "https://github.com/vim/vim/commit/43afc581a37a35762dd0ef292f038b9dc5680a24"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-fh26-8f79-wj97",
"url": "https://github.com/vim/vim/security/advisories/GHSA-fh26-8f79-wj97"
}
],
"release_date": "2026-07-09T22:39:01.803000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-23T16:30:47+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70818"
},
{
"category": "workaround",
"details": "Users should exercise caution when opening untrusted PHP files and avoid invoking omni-completion on them. To prevent exploitation, the PHP omni-completion script can be disabled by moving or renaming `phpcomplete.vim`. For example, execute `mv /usr/share/vim/vim*/autoload/phpcomplete.vim /usr/share/vim/vim*/autoload/phpcomplete.vim.bak`. This action will disable PHP omni-completion functionality. A restart of Vim is necessary for this change to take effect.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vim: Vim: Arbitrary code execution via crafted PHP file in omni-completion"
},
{
"cve": "CVE-2026-59858",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-07-09T23:01:43.278752+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498868"
}
],
"notes": [
{
"category": "description",
"text": "A command injection vulnerability in Vim\u0027s C omni-completion script allows an attacker to execute arbitrary commands if a user is tricked into opening a maliciously crafted tags file and manually invoking the autocomplete feature.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate flaw in Vim\u0027s C omni-completion script allows for arbitrary command execution. Exploitation requires a user to open a specially crafted C source file along with a malicious project tags file and then invoke C omni-completion. This limits the attack vector as it relies on specific user interaction and the presence of a hostile tags file, making it less likely to be exploited without user awareness.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59858"
},
{
"category": "external",
"summary": "RHBZ#2498868",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498868"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59858",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59858"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59858",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59858"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/6b611b0d15603c52ebdad17172b0232b4f65704e",
"url": "https://github.com/vim/vim/commit/6b611b0d15603c52ebdad17172b0232b4f65704e"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-mf92-v4xw-j45x",
"url": "https://github.com/vim/vim/security/advisories/GHSA-mf92-v4xw-j45x"
}
],
"release_date": "2026-07-09T22:37:52.789000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-23T16:30:47+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70818"
},
{
"category": "workaround",
"details": "Users are advised to avoid opening untrusted C source files or project tags files in Vim. Exercising caution and only processing trusted content prevents exploitation.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion"
},
{
"cve": "CVE-2026-73072",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-08-11T15:41:15.596551+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2514037"
}
],
"notes": [
{
"category": "description",
"text": "A heap buffer overflow in Vim allows a local attacker to cause a denial of service or potentially execute arbitrary code. The flaw is triggered by processing a specially crafted spell file, where the set_sofo() function fails to reset internal data between sections, leading to an out-of-bounds write.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Heap buffer overflow allows arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A local attacker can exploit an Important heap buffer overflow in Vim to execute arbitrary code by tricking a user into loading a malicious spell file.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73072"
},
{
"category": "external",
"summary": "RHBZ#2514037",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514037"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73072",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73072"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73072",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73072"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/05c41c922309c7a11b6ec2f124be66551c90d66a",
"url": "https://github.com/vim/vim/commit/05c41c922309c7a11b6ec2f124be66551c90d66a"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/releases/tag/v9.2.0846",
"url": "https://github.com/vim/vim/releases/tag/v9.2.0846"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-9jqx-hgpr-6v64",
"url": "https://github.com/vim/vim/security/advisories/GHSA-9jqx-hgpr-6v64"
}
],
"release_date": "2026-08-11T15:31:35.331000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-23T16:30:47+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70818"
},
{
"category": "workaround",
"details": "If spell checking is unused, disable it with set nospell in ~/.vimrc and do not set spelllang. If spell is required, load only trusted .spl files from Vim\u2019s spell directories and do not place untrusted spell files on runtimepath. Additionally, consider disabling modelines (set nomodeline in ~/.vimrc) to prevent untrusted text files from automatically overriding these settings when opened.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vim: Vim: Heap buffer overflow allows arbitrary code execution"
},
{
"cve": "CVE-2026-73076",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-08-11T15:41:02.894650+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2514034"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability in Vim allows remote attackers to execute arbitrary commands by crafting a malicious .VimballRecord file that injects OS commands executed when processed by the vimball#RmVimball() function.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Arbitrary command execution via crafted vimball",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability in Vim where a crafted vimball can lead to arbitrary command execution. The flaw allows an attacker to embed malicious commands within a `.VimballRecord` file, which are then executed with user privileges during a later, unrelated vimball installation or removal. This extends the impact of processing untrusted vimball files beyond the initial installation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73076"
},
{
"category": "external",
"summary": "RHBZ#2514034",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514034"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73076",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73076"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73076",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73076"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/581a2f3ac9c6f96a26324f6b2c8c11415fd0d452",
"url": "https://github.com/vim/vim/commit/581a2f3ac9c6f96a26324f6b2c8c11415fd0d452"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-r22p-fhw4-84p2",
"url": "https://github.com/vim/vim/security/advisories/GHSA-r22p-fhw4-84p2"
}
],
"release_date": "2026-08-11T15:37:59.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-23T16:30:47+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70818"
},
{
"category": "workaround",
"details": "Avoid installing or removing vimballs from untrusted sources. This vulnerability relies on a user processing a malicious vimball, which then injects commands that are executed during a subsequent vimball operation. Exercise caution when handling vimball files from unknown or unverified origins.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vim: Vim: Arbitrary command execution via crafted vimball"
},
{
"cve": "CVE-2026-73077",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-08-11T16:11:25.535913+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2514065"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability in Vim\u0027s shell script plugins (sh.vim, zsh.vim, ps1.vim) allows arbitrary code execution if a user selects maliciously crafted text in Visual mode and triggers a keyword lookup, due to improperly escaped shell metacharacters.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Arbitrary Code Execution via Insecure Shell Command Handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Vim\u0027s shell plugins allows full system compromise in Red Hat environments if a user selects crafted text in Visual mode and triggers a keyword lookup. This does not affect RHEL 8 and older versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73077"
},
{
"category": "external",
"summary": "RHBZ#2514065",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514065"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73077",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73077"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73077",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73077"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/c5a82fe013e73c98004ad7cd4f906b1ad1ed610e",
"url": "https://github.com/vim/vim/commit/c5a82fe013e73c98004ad7cd4f906b1ad1ed610e"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-r5v6-q6j8-8qw2",
"url": "https://github.com/vim/vim/security/advisories/GHSA-r5v6-q6j8-8qw2"
}
],
"release_date": "2026-08-11T15:39:24.579000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-23T16:30:47+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70818"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, users can disable the `keywordprg` option for shell script filetypes. This prevents Vim from executing external commands via the `K` command with potentially untrusted input. Create or edit the following files in your Vim configuration directory:\n\n- `~/.vim/after/ftplugin/sh.vim`: `setlocal keywordprg=`\n- `~/.vim/after/ftplugin/zsh.vim`: `setlocal keywordprg=`\n- `~/.vim/after/ftplugin/ps1.vim`: `setlocal keywordprg=`\n\nThis change takes effect the next time a shell script is opened in Vim.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vim: Vim: Arbitrary Code Execution via Insecure Shell Command Handling"
},
{
"cve": "CVE-2026-73078",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"discovery_date": "2026-08-11T16:10:59.827742+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2514058"
}
],
"notes": [
{
"category": "description",
"text": "A flaw in Vim\u0027s netrw plugin fails to sanitize special characters in directory paths when creating GUI menu entries. Browsing or bookmarking a maliciously crafted path in GUI Vim allows attackers to execute arbitrary OS commands as the running user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Arbitrary Code Execution via Crafted Netrw Menu Entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Vim\u0027s `netrw` plugin allows for arbitrary command execution in GUI Vim. By crafting a malicious directory path, an attacker could exploit improper neutralization of special characters when the path is browsed or bookmarked, leading to command injection. This issue specifically impacts GUI installations and requires user interaction.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73078"
},
{
"category": "external",
"summary": "RHBZ#2514058",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514058"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73078",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73078"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73078",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73078"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/29c6fd090d4520592f8be7d9ec81190edf25ef69",
"url": "https://github.com/vim/vim/commit/29c6fd090d4520592f8be7d9ec81190edf25ef69"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-rcr7-f3wr-22r2",
"url": "https://github.com/vim/vim/security/advisories/GHSA-rcr7-f3wr-22r2"
}
],
"release_date": "2026-08-11T15:41:08.048000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-23T16:30:47+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:70818"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid browsing or bookmarking untrusted or maliciously crafted directory paths within GUI Vim. Users should exercise caution when interacting with `netrw` menu entries derived from external or untrusted sources.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"AppStream-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-2:8.2.2637-22.el9_6.4.src",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-X11-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-common-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-debugsource-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-enhanced-debuginfo-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-filesystem-2:8.2.2637-22.el9_6.4.noarch",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-2:8.2.2637-22.el9_6.4.x86_64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.aarch64",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.ppc64le",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.s390x",
"BaseOS-9.6.0.Z.EUS:vim-minimal-debuginfo-2:8.2.2637-22.el9_6.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vim: Vim: Arbitrary Code Execution via Crafted Netrw Menu Entries"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…