Количество 14
Количество 14
CVE-2026-52858
Vim is an open source, command line text editor. Prior to version 9.2.0561, the Python omni-completion script in python3complete.vim for Vim with the +python3 interpreter enabled (and the legacy pythoncomplete.vim for builds with the +python interpreter) executes the import and from statements found in the current buffer through Python's import machinery. Because the buffer's working directory is on sys.path, opening a hostile .py file with a sibling Python package and invoking omni-completion runs that package's top-level code as the editing user. This issue has been patched in version 9.2.0561.
CVE-2026-52858
Vim is an open source, command line text editor. Prior to version 9.2.0561, the Python omni-completion script in python3complete.vim for Vim with the +python3 interpreter enabled (and the legacy pythoncomplete.vim for builds with the +python interpreter) executes the import and from statements found in the current buffer through Python's import machinery. Because the buffer's working directory is on sys.path, opening a hostile .py file with a sibling Python package and invoking omni-completion runs that package's top-level code as the editing user. This issue has been patched in version 9.2.0561.
CVE-2026-52858
Vim is an open source, command line text editor. Prior to version 9.2.0561, the Python omni-completion script in python3complete.vim for Vim with the +python3 interpreter enabled (and the legacy pythoncomplete.vim for builds with the +python interpreter) executes the import and from statements found in the current buffer through Python's import machinery. Because the buffer's working directory is on sys.path, opening a hostile .py file with a sibling Python package and invoking omni-completion runs that package's top-level code as the editing user. This issue has been patched in version 9.2.0561.
CVE-2026-52858
Vim: Arbitrary Code Execution via Python Omni-Completion
CVE-2026-52858
Vim is an open source, command line text editor. Prior to version 9.2. ...
ROS-20260819-80-0026
Уязвимость vim
ROS-20260819-73-0026
Уязвимость vim
BDU:2026-14512
Уязвимость механизма автодополнения Python omni-completion модулей runtime/autoload/pythoncomplete.vim и runtime/autoload/python3complete.vim текстового редактора Vim, позволяющая нарушителю выполнить произвольный код
RLSA-2026:38511
Important: vim security update
RLSA-2026:38510
Important: vim security update
RLSA-2026:38509
Important: vim security update
ELSA-2026-38511
ELSA-2026-38511: vim security update (IMPORTANT)
ELSA-2026-38510
ELSA-2026-38510: vim security update (IMPORTANT)
ELSA-2026-38509
ELSA-2026-38509: vim security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-52858 Vim is an open source, command line text editor. Prior to version 9.2.0561, the Python omni-completion script in python3complete.vim for Vim with the +python3 interpreter enabled (and the legacy pythoncomplete.vim for builds with the +python interpreter) executes the import and from statements found in the current buffer through Python's import machinery. Because the buffer's working directory is on sys.path, opening a hostile .py file with a sibling Python package and invoking omni-completion runs that package's top-level code as the editing user. This issue has been patched in version 9.2.0561. | CVSS3: 7.8 | 0% Низкий | 3 месяца назад |
 | CVE-2026-52858 Vim is an open source, command line text editor. Prior to version 9.2.0561, the Python omni-completion script in python3complete.vim for Vim with the +python3 interpreter enabled (and the legacy pythoncomplete.vim for builds with the +python interpreter) executes the import and from statements found in the current buffer through Python's import machinery. Because the buffer's working directory is on sys.path, opening a hostile .py file with a sibling Python package and invoking omni-completion runs that package's top-level code as the editing user. This issue has been patched in version 9.2.0561. | CVSS3: 7.3 | 0% Низкий | 3 месяца назад |
 | CVE-2026-52858 Vim is an open source, command line text editor. Prior to version 9.2.0561, the Python omni-completion script in python3complete.vim for Vim with the +python3 interpreter enabled (and the legacy pythoncomplete.vim for builds with the +python interpreter) executes the import and from statements found in the current buffer through Python's import machinery. Because the buffer's working directory is on sys.path, opening a hostile .py file with a sibling Python package and invoking omni-completion runs that package's top-level code as the editing user. This issue has been patched in version 9.2.0561. | CVSS3: 7.8 | 0% Низкий | 3 месяца назад |
 | CVE-2026-52858 Vim: Arbitrary Code Execution via Python Omni-Completion | 0% Низкий | 3 месяца назад | |
| CVE-2026-52858 Vim is an open source, command line text editor. Prior to version 9.2. ... | CVSS3: 7.8 | 0% Низкий | 3 месяца назад |
 | ROS-20260819-80-0026 Уязвимость vim | CVSS3: 8 | 0% Низкий | 30 дней назад |
| ROS-20260819-73-0026 Уязвимость vim | CVSS3: 8 | 0% Низкий | 30 дней назад |
 | BDU:2026-14512 Уязвимость механизма автодополнения Python omni-completion модулей runtime/autoload/pythoncomplete.vim и runtime/autoload/python3complete.vim текстового редактора Vim, позволяющая нарушителю выполнить произвольный код | CVSS3: 8 | 0% Низкий | 4 месяца назад |
 | RLSA-2026:38511 Important: vim security update | около 1 месяца назад | ||
| RLSA-2026:38510 Important: vim security update | около 1 месяца назад | ||
| RLSA-2026:38509 Important: vim security update | около 1 месяца назад | ||
| ELSA-2026-38511 ELSA-2026-38511: vim security update (IMPORTANT) | 2 месяца назад | ||
| ELSA-2026-38510 ELSA-2026-38510: vim security update (IMPORTANT) | 2 месяца назад | ||
| ELSA-2026-38509 ELSA-2026-38509: vim security update (IMPORTANT) | 2 месяца назад |
Уязвимостей на страницу