Skip to content
OpenAdvisories
Medium USN-8304-1 3 CVEs

vim vulnerabilities

Published May 25, 2026 · Updated May 26, 2026

Ecosystem: Ubuntu

Summary

Joshua Rogers discovered that Vim incorrectly handled certain URL schemes
in the netrw plugin. An attacker could possibly use this issue to execute
arbitrary commands. (CVE-2026-42307)

It was discovered that Vim incorrectly handled command-line completion for
the :find command. An attacker could possibly use this issue to execute
arbitrary commands. (CVE-2026-44656)

Daniel Cervera discovered that Vim incorrectly handled loading spell files.
An attacker could possibly use this issue to cause a denial of service, or
to execute arbitrary code. (CVE-2026-45130)

Fixed packages 8

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS vim 2:8.2.3995-1ubuntu2.30
Ubuntu · 24.04 LTS 24.04:LTS vim 2:9.1.0016-1ubuntu7.14
Ubuntu · 25.10 vim 2:9.1.0967-1ubuntu6.5
Ubuntu · 26.04 LTS 26.04:LTS vim 2:9.1.2141-1ubuntu4.2
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS vim 2:7.4.052-1ubuntu3.1+esm26
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS vim 2:7.4.1689-3ubuntu1.5+esm32
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS vim 2:8.0.1453-1ubuntu1.13+esm17
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS vim 2:8.1.2269-1ubuntu5.32+esm5

Vulnerabilities 3

  • Medium 6.6
    CVE-2026-45130

    Vim: Heap Buffer Overflow in spell file loading

    Vim is an open source, command line text editor. Prior to version 9.2.0450, a heap buffer overflow exists in read_compound() in src/spellfile.c when loading a crafted spell file (.spl) with UTF-8 encoding active. An attacker-controlled length field in the spe…

    vim vim vim vim Debian Ubuntu Azure Linux Alpine
  • Medium 4.6
    CVE-2026-44656 Public exploit

    Vim: OS Command Injection via 'path' completion

    Vim is an open source, command line text editor. Prior to version 9.2.0435, an OS command injection vulnerability exists in Vim's :find command-line completion. When the path option contains backtick-enclosed shell commands, those commands are executed during…

    vim vim vim vim Debian Ubuntu Azure Linux Alpine
  • Medium 4.4
    CVE-2026-42307

    Vim: OS Command Injection in netrw

    Vim is an open source, command line text editor. Prior to version 9.2.0383, an OS command injection vulnerability exists in the netrw standard plugin bundled with Vim. By inducing a user to open a crafted URL (e.g., using the sftp:// or file:// protocol handl…

    vim vim vim vim Debian Ubuntu Alpine

References

  • report
    https://ubuntu.com/security/CVE-2026-42307
  • report
    https://ubuntu.com/security/CVE-2026-44656
  • report
    https://ubuntu.com/security/CVE-2026-45130