Vim is an open source, command line text editor. Prior to 9.2.0316, a command injection vulnerability in Vim's netbeans interface allows a malicious netbeans server to execute arbitrary Ex commands when Vim connects to it, via unsanitized strings in the defineAnnoType and specialKeys protocol messages. This vulnerability is fixed in 9.2.0316.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade vim | Apr 9, 2026 | Apr 8, 2026 |
| Amazon_linux_2023 | — | Upgrade vim-default-editorUpgrade vim-commonUpgrade vim-minimal-debuginfoUpgrade vim-debuginfoUpgrade vim-debugsourceUpgrade vim-enhancedUpgrade vim-minimalUpgrade vim-filesystemUpgrade vim-enhanced-debuginfoUpgrade xxdUpgrade vim-dataUpgrade xxd-debuginfo | Jun 23, 2026 | Apr 8, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Apr 8, 2026 |
| Ubuntu | — | Upgrade vim-gnome (Ubuntu Pro)Upgrade vim-docUpgrade vim-noxUpgrade vim-tinyUpgrade vim-athenaUpgrade vim-gtk (Ubuntu Pro)Upgrade vim-runtime (Ubuntu Pro)Upgrade xxdUpgrade vim-athena (Ubuntu Pro)Upgrade vim-nox-py2 (Ubuntu Pro)Upgrade vim-nox (Ubuntu Pro)Upgrade vim-commonUpgrade vim-runtimeUpgrade vim-gtk3-py2 (Ubuntu Pro)Upgrade vim-tiny (Ubuntu Pro)Upgrade vim-gui-common (Ubuntu Pro)Upgrade vim-gtk3Upgrade vim-gui-commonUpgrade vimUpgrade vim-motifUpgrade vim-common (Ubuntu Pro)Upgrade vim-gnome-py2 (Ubuntu Pro)Upgrade vim-gtk3 (Ubuntu Pro)Upgrade vim-athena-py2 (Ubuntu Pro)Upgrade vim-lesstif (Ubuntu Pro)Upgrade vim-gtk-py2 (Ubuntu Pro)Upgrade vim (Ubuntu Pro)Upgrade vim-gtk | Apr 28, 2026 | Apr 27, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 1, 2026 | Apr 8, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub