Vim is an open source, command line text editor. Prior to version 9.2.0076, a heap-based buffer overflow WRITE and an out-of-bounds READ exist in Vim's terminal emulator when processing maximum combining characters from Unicode supplementary planes. Version 9.2.0076 fixes the issue.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade vim-X11Upgrade vim-filesystemUpgrade vim-minimalUpgrade vim-commonUpgrade vim-enhanced | Oct 11, 2026 | Sep 10, 2026 |
| Alpine Linux | — | Upgrade vim | Mar 2, 2026 | Feb 27, 2026 |
| Amazon_linux_2023 | — | Upgrade vim-enhancedUpgrade vim-filesystemUpgrade vim-commonUpgrade vim-default-editorUpgrade vim-minimal-debuginfoUpgrade xxd-debuginfoUpgrade vim-debuginfoUpgrade vim-enhanced-debuginfoUpgrade vim-debugsourceUpgrade vim-minimalUpgrade xxdUpgrade vim-data | Apr 14, 2026 | Feb 27, 2026 |
| Oracle_linux | — | Upgrade vim-dataUpgrade vim-minimalUpgrade xxdUpgrade vim-X11Upgrade vim-commonUpgrade vim-enhancedUpgrade vim-filesystem | Oct 22, 2026 | Feb 27, 2026 |
| Redhat_linux | — | Upgrade vim-commonUpgrade vim-minimalUpgrade vim-filesystemUpgrade vim-dataUpgrade vim-enhanced-debuginfoUpgrade xxd-debuginfoUpgrade vim-X11-debuginfoUpgrade vim-debugsourceUpgrade xxdUpgrade vim-minimal-debuginfoUpgrade vim-debuginfoUpgrade vim-X11Upgrade vim-common-debuginfoNo solution existsUpgrade vim-enhanced | Jul 17, 2026 | Feb 27, 2026 |
| Rocky_linux | — | Upgrade vim-enhancedUpgrade vim-debugsourceUpgrade vim-X11-debuginfoUpgrade vim-common-debuginfoUpgrade vim-enhanced-debuginfoUpgrade vim-minimalUpgrade xxd-debuginfoUpgrade vim-minimal-debuginfoUpgrade vim-commonUpgrade vim-X11Upgrade xxdUpgrade vim-debuginfo | Sep 15, 2026 | Sep 11, 2026 |
| Ubuntu | — | Upgrade vim (Ubuntu Pro)Upgrade vim | Mar 19, 2026 | Feb 27, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 27, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub