Where
-Infinity
0

Trending

Last week
Last month
Last year

oss-sec[vim-security] Arbitrary Command Execution via the Vimball cord File in Vim < 9.2.0847

First published (updated )
https://seclists.org/oss-sec/2026/q3/259

oss-sec[vim-security] Heap Buffer Overflow when Loading a Spell File in Vim < 9.2.0846

First published (updated )
https://seclists.org/oss-sec/2026/q3/258

oss-sec[vim-security] Arbitrary Ex Command Execution in C Omni-Completion in Vim < 9.2.0845

First published (updated )
https://seclists.org/oss-sec/2026/q3/257

oss-sec[vim-security] Use-after-fe in JSON Decoding in Vim >= 9.2.0511 && Vim < 9.2.0844

First published (updated )
https://seclists.org/oss-sec/2026/q3/256

oss-sec[vim-security] Out-of-bounds Access in Popup Opacity Handling in Vim >= 9.2.0469 && Vim < 9.2.0843

First published (updated )
https://seclists.org/oss-sec/2026/q3/249
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

oss-sec[vim-security] Stack Buffer Overflow in the Vim Socket Server in Vim < 9.2.0842

First published (updated )
https://seclists.org/oss-sec/2026/q3/248

oss-sec[vim-security] Heap Buffer Overflow in Text Property Handling in Vim < 9.2.0841

First published (updated )
https://seclists.org/oss-sec/2026/q3/247

oss-sec[vim-security] Arbitrary Code Execution via Netrw Menu Construction in Vim < 9.2.0840

First published (updated )
https://seclists.org/oss-sec/2026/q3/246

oss-sec[vim-security] Arbitrary Code Execution via Shell Keyword Lookup in Vim < 9.2.0839

First published (updated )
https://seclists.org/oss-sec/2026/q3/245

vim VimVim: Arbitrary Code Execution via PHP Omni-Completion

Risk 74
Severity
8.4
First published (updated )
CVE-2026-59856
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

vimVim: Arbitrary Code Execution via C Omni-Completion

Risk 74
Severity
8.4
First published (updated )
CVE-2026-59858

vim VimVim: Out-of-bounds Write in SAL Soundfolding

Risk 32
Severity
5.6
First published (updated )
CVE-2026-59857

oss-sec[vim-security] Arbitrary Code Execution via PHP Omni-Completion in Vim < 9.2.0736

First published (updated )
https://seclists.org/oss-sec/2026/q2/1048

oss-sec[vim-security] Arbitrary Code Execution via C Omni-Completion in Vim < 9.2.0735

First published (updated )
https://seclists.org/oss-sec/2026/q2/1045

vim VimVim: Out-of-bounds Write in Spell File Word Count

Risk 68
Severity
5.7
First published (updated )
CVE-2026-55693
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

vim VimVim: Out-of-bounds Write in Spell File Prefix Dump

Risk 31
Severity
5.5
First published (updated )
CVE-2026-55892

vim VimVim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filename

Risk 68
Severity
5.7
First published (updated )
CVE-2026-55895

vim VimVim: Out-of-bounds Read in Text Property Count

Risk 41
Severity
6.1
First published (updated )
CVE-2026-57451

vimVim: Out-of-bounds Read with libsodium-encrypted Files

Risk 31
Severity
5.5
First published (updated )
CVE-2026-57452

vim VimVim: PowerShell Command Injection via Unescaped Filename in zip.vim Extraction

Risk 59
Severity
7.3
First published (updated )
CVE-2026-57453
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

vim VimVim: Out-of-bounds Read with Text Properties

Risk 45
Severity
6.8
First published (updated )
CVE-2026-57454

vim VimVim: Stack out-of-bounds write in `spell_soundfold_sofo()` via an over-length `soundfold()` argument

Risk 68
Severity
4
First published (updated )
CVE-2026-57455

vim VimVim: Arbitrary Code Execution via Python Omni-Completion Docstrings

Risk 74
Severity
8.4
First published (updated )
CVE-2026-57456

oss-sec[vim-security] Out-of-bounds Write in SAL Soundfolding in Vim < 9.2.0725

First published (updated )
https://seclists.org/oss-sec/2026/q2/1020

oss-sec[vim-security] Arbitrary Code Execution via Python Omni-Completion Docstrings in Vim < 9.2.0699

First published (updated )
https://seclists.org/oss-sec/2026/q2/993
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

oss-sec[vim-security] Out-of-bounds Write in SOFO Soundfolding in Vim < 9.2.0698

First published (updated )
https://seclists.org/oss-sec/2026/q2/992

oss-sec[vim-security] Out-of-bounds ad with Text Properties in Vim >= 9.2.0320 && Vim < 9.2.0679

First published (updated )
https://seclists.org/oss-sec/2026/q2/987

oss-sec[vim-security] PowerShell Command Injection in zip.vim via Crafted Archive Entry Names in Vim > 9.1.1783 && Vim < 9.2.0678

First published (updated )
https://seclists.org/oss-sec/2026/q2/986

oss-sec[vim-security] Out-of-bounds ad with libsodium-encrypted Files in Vim < 9.2.0671

First published (updated )
https://seclists.org/oss-sec/2026/q2/968

oss-sec[vim-security] Out-of-bounds ad in Text Property Count in Vim < 9.2.0670

First published (updated )
https://seclists.org/oss-sec/2026/q2/961
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203