Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault (SEGV) exist in Vim's swap file recovery logic. Both are caused by unvalidated fields read from crafted pointer blocks within a swap file. Version 9.2.0077 fixes the issue.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade vim-commonUpgrade vim-X11Upgrade vim-filesystemUpgrade vim-minimalUpgrade vim-enhanced | Apr 13, 2026 | Apr 7, 2026 |
| Alpine Linux | — | Upgrade vim | Mar 2, 2026 | Feb 27, 2026 |
| Amazon_linux_2023 | — | Upgrade vim-enhancedUpgrade vim-minimalUpgrade vim-minimal-debuginfoUpgrade vim-debugsourceUpgrade vim-commonUpgrade vim-enhanced-debuginfoUpgrade vim-filesystemUpgrade vim-debuginfoUpgrade vim-default-editorUpgrade xxd-debuginfoUpgrade vim-dataUpgrade xxd | Apr 14, 2026 | Feb 27, 2026 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Jun 2, 2026 |
| Oracle_linux | — | Upgrade vim-dataUpgrade vim-commonUpgrade vim-minimalUpgrade vim-filesystemUpgrade vim-enhancedUpgrade vim-X11Upgrade xxd | Apr 22, 2026 | Feb 27, 2026 |
| Redhat Openshift | — | Upgrade ose-rhel-coreos | Aug 10, 2026 | Feb 27, 2026 |
| Redhat_linux | — | Upgrade vim-debugsourceUpgrade vim-minimalUpgrade vim-common-debuginfoUpgrade vim-enhanced-debuginfoUpgrade xxdUpgrade vim-dataUpgrade vim-enhancedUpgrade vim-X11-debuginfoUpgrade vim-commonUpgrade vim-X11Upgrade vim-minimal-debuginfoUpgrade xxd-debuginfoUpgrade vim-filesystemUpgrade vim-debuginfo | Apr 3, 2026 | Feb 27, 2026 |
| Rocky_linux | — | Upgrade vim-common-debuginfoUpgrade vim-enhanced-debuginfoUpgrade vim-debugsourceUpgrade vim-minimalUpgrade xxdUpgrade vim-X11Upgrade xxd-debuginfoUpgrade vim-enhancedUpgrade vim-commonUpgrade vim-debuginfoUpgrade vim-X11-debuginfoUpgrade vim-minimal-debuginfo | Apr 10, 2026 | Apr 9, 2026 |
| Ubuntu | — | Upgrade vimUpgrade vim (Ubuntu Pro) | Mar 19, 2026 | Feb 27, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 27, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub