Skip to content
OpenAdvisories
High ELSA-2026-38509 4 CVEs

Important: vim security update (Oracle Linux 10)

Published Jul 16, 2026 · Updated Jul 16, 2026

Ecosystem: Oracle Linux

Summary

[9.1.083-9.0.1.el10_2.7]
- Remove upstream references [Orabug: 31197557]

[2:9.1.083-9.7]
- RHEL-186660 CVE-2026-47162 vim: netrw code injection via NetrwBookHistSave()
- RHEL-186671 CVE-2026-52858 vim: possible code execution with python3complete

[2:9.1.083-9.6]
- RHEL-185867 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin

[2:9.1.083-9.5]
- RHEL-178233 CVE-2026-46483 vim: command injection in tar plugin

[2:9.1.083-9.4]
- RHEL-171481 CVE-2026-41411 vim: Command injection via backticks in tag files

[2:9.1.083-9.3]
- RHEL-170123 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite
via path traversal bypass

[2:9.1.083-9.2]
- Resolves: RHEL-164952 vim: arbitrary command execution via modeline sandbox bypass

[2:9.1.083-9.1]
- RHEL-159616 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function

Fixed packages 7

ReleasePackageFixed in
Oracle Linux · 10 vim-common 2:9.1.083-9.0.1.el10_2.7
Oracle Linux · 10 vim-data 2:9.1.083-9.0.1.el10_2.7
Oracle Linux · 10 vim-enhanced 2:9.1.083-9.0.1.el10_2.7
Oracle Linux · 10 vim-filesystem 2:9.1.083-9.0.1.el10_2.7
Oracle Linux · 10 vim-minimal 2:9.1.083-9.0.1.el10_2.7
Oracle Linux · 10 vim-X11 2:9.1.083-9.0.1.el10_2.7
Oracle Linux · 10 xxd 2:9.1.083-9.0.1.el10_2.7

Vulnerabilities 4

  • High 7.3
    CVE-2026-47162

    Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name

    Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave() in the netrw plugin (runtime/pack/dist/opt/netrw/autoload/netrw.vim) when serializing browsed directory paths …

    vim vim vim vim Debian Ubuntu Azure Linux
  • High 7.3
    CVE-2026-52858

    Vim: Arbitrary Code Execution via Python Omni-Completion

    Vim is an open source, command line text editor. Prior to version 9.2.0561, the Python omni-completion script in python3complete.vim for Vim with the +python3 interpreter enabled (and the legacy pythoncomplete.vim for builds with the +python interpreter) exec…

    vim vim vim vim Debian Ubuntu Azure Linux Alpine
  • Medium 5.1
    CVE-2026-47167

    Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex

    Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch() in the cucumber filetype plugin (runtime/ftplugin/cucumber.vim) on Vim builds with +ruby support. Step-definition patterns read …

    vim vim vim vim Debian Ubuntu Azure Linux
  • Low 3.6
    CVE-2026-46483

    Vim: Command injection in tar#Vimuntar via missing shellescape {special} flag

    Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tar#Vimuntar() in runtime/autoload/tar.vim when decompressing .tgz archives on Unix-like systems. The function builds :!gunzip and :!gzip -d comman…

    vim vim vim vim Debian Ubuntu Azure Linux Alpine Wolfi