https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 22:45:00 +0000 https://vulnerability.circl.lu/vuln/cve-2026-73076 <p><strong>Affected:</strong> vim</p> <p>Vim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named .VimballRecord to overwrite the installation record with attacker-chosen commands. When vimball#RmVimball() later processes the matching record entry, the stored Ex commands, including operating-system commands invoked through :!, execute with the privileges of the user running Vim. This issue is fixed in version 9.2.0847.</p> <p><strong>Affected:</strong> vim</p> <p>Vim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named .VimballRecord to overwrite the installation record with attacker-chosen commands. When vimball#RmVimball() later processes the matching record entry, the stored Ex commands, including operating-system commands invoked through :!, execute with the privileges of the user running Vim. This issue is fixed in version 9.2.0847.</p> https://vulnerability.circl.lu/vuln/cve-2026-73076 https://vulnerability.circl.lu/vuln/usn-8657-1 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: vim, Ubuntu:Pro:16.04:LTS: vim, Ubuntu:Pro:18.04:LTS: vim, Ubuntu:Pro:20.04:LTS: vim, Ubuntu:22.04:LTS: vim, Ubuntu:24.04:LTS: vim, Ubuntu:26.04:LTS: vim</p> <p>It was discovered that Vim incorrectly handled memory when decoding certain JSON input. An attacker could possibly use this issue to cause Vim to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-73071)</p> <p>Yazan Balawneh discovered that Vim incorrectly handled memory when opening certain spell files. An attacker could possibly use this issue to cause Vim to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-73072)</p> <p>It was discovered that Vim incorrectly handled memory when processing certain files with a large number of text properties. An attacker could possibly use this issue to cause Vim to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-73074)</p> <p>It was discovered that Vim incorrectly handled certain vimball files. An attacker could possibly use this issue to execute arbitrary code. (CVE-2026-73076)</p> <p>It was discovered that Vim incorrectly handled shell arguments during keyword lookups. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-73077)</p> <p>David Carliez discovered that Vim incorrectly handled certain directory paths when constructing netrw menus. An attacker could possibly use this issue to execute arbitrary code. (CVE-2026-…</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: vim, Ubuntu:Pro:16.04:LTS: vim, Ubuntu:Pro:18.04:LTS: vim, Ubuntu:Pro:20.04:LTS: vim, Ubuntu:22.04:LTS: vim, Ubuntu:24.04:LTS: vim, Ubuntu:26.04:LTS: vim</p> <p>It was discovered that Vim incorrectly handled memory when decoding certain JSON input. An attacker could possibly use this issue to cause Vim to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-73071)</p> <p>Yazan Balawneh discovered that Vim incorrectly handled memory when opening certain spell files. An attacker could possibly use this issue to cause Vim to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-73072)</p> <p>It was discovered that Vim incorrectly handled memory when processing certain files with a large number of text properties. An attacker could possibly use this issue to cause Vim to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-73074)</p> <p>It was discovered that Vim incorrectly handled certain vimball files. An attacker could possibly use this issue to execute arbitrary code. (CVE-2026-73076)</p> <p>It was discovered that Vim incorrectly handled shell arguments during keyword lookups. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-73077)</p> <p>David Carliez discovered that Vim incorrectly handled certain directory paths when constructing netrw menus. An attacker could possibly use this issue to execute arbitrary code. (CVE-2026-…</p> https://vulnerability.circl.lu/vuln/usn-8657-1