Поиск уязвимостей
Количество 16
Количество 16
BDU:2026-05072
Уязвимость функции get_tagfname() файла src/tag.c текстового редактора vim, позволяющая нарушителю выполнить произвольный код
CVE-2026-25749
Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the get_tagfname() function in src/tag.c. When processing help file tags, Vim copies the user-controlled 'helpfile' option value into a fixed-size heap buffer of MAXPATHL + 1 bytes (typically 4097 bytes) using an unsafe STRCPY() operation without any bounds checking. This issue has been patched in version 9.1.2132.
CVE-2026-25749
Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the get_tagfname() function in src/tag.c. When processing help file tags, Vim copies the user-controlled 'helpfile' option value into a fixed-size heap buffer of MAXPATHL + 1 bytes (typically 4097 bytes) using an unsafe STRCPY() operation without any bounds checking. This issue has been patched in version 9.1.2132.
CVE-2026-25749
Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the get_tagfname() function in src/tag.c. When processing help file tags, Vim copies the user-controlled 'helpfile' option value into a fixed-size heap buffer of MAXPATHL + 1 bytes (typically 4097 bytes) using an unsafe STRCPY() operation without any bounds checking. This issue has been patched in version 9.1.2132.
CVE-2026-25749
Vim is an open source, command line text editor. Prior to version 9.1. ...
ROS-20260319-80-0038
Уязвимость vim
ROS-20260319-73-0035
Уязвимость vim
RLSA-2026:5602
Moderate: vim security update
RLSA-2026:4715
Moderate: vim security update
RLSA-2026:4442
Moderate: vim security update
ELSA-2026-5602
ELSA-2026-5602: vim security update (MODERATE)
ELSA-2026-4715
ELSA-2026-4715: vim security update (MODERATE)
ELSA-2026-4442
ELSA-2026-4442: vim security update (MODERATE)
ALT-PU-2026-8017
ALT-PU-2026-8017: package `vim` update to version 9.2.0478-alt2
ALT-PU-2026-8499
ALT-PU-2026-8499: package `vim` update to version 9.2.0537-alt1
ELSA-2026-6617
ELSA-2026-6617: vim security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-05072 Уязвимость функции get_tagfname() файла src/tag.c текстового редактора vim, позволяющая нарушителю выполнить произвольный код | CVSS3: 6.6 | 0% Низкий | 9 месяцев назад |
 | CVE-2026-25749 Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the get_tagfname() function in src/tag.c. When processing help file tags, Vim copies the user-controlled 'helpfile' option value into a fixed-size heap buffer of MAXPATHL + 1 bytes (typically 4097 bytes) using an unsafe STRCPY() operation without any bounds checking. This issue has been patched in version 9.1.2132. | CVSS3: 6.6 | 0% Низкий | 9 месяцев назад |
 | CVE-2026-25749 Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the get_tagfname() function in src/tag.c. When processing help file tags, Vim copies the user-controlled 'helpfile' option value into a fixed-size heap buffer of MAXPATHL + 1 bytes (typically 4097 bytes) using an unsafe STRCPY() operation without any bounds checking. This issue has been patched in version 9.1.2132. | CVSS3: 7.3 | 0% Низкий | 9 месяцев назад |
 | CVE-2026-25749 Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the get_tagfname() function in src/tag.c. When processing help file tags, Vim copies the user-controlled 'helpfile' option value into a fixed-size heap buffer of MAXPATHL + 1 bytes (typically 4097 bytes) using an unsafe STRCPY() operation without any bounds checking. This issue has been patched in version 9.1.2132. | CVSS3: 6.6 | 0% Низкий | 9 месяцев назад |
| CVE-2026-25749 Vim is an open source, command line text editor. Prior to version 9.1. ... | CVSS3: 6.6 | 0% Низкий | 9 месяцев назад |
 | ROS-20260319-80-0038 Уязвимость vim | CVSS3: 6.6 | 0% Низкий | 8 месяцев назад |
| ROS-20260319-73-0035 Уязвимость vim | CVSS3: 6.6 | 0% Низкий | 8 месяцев назад |
 | RLSA-2026:5602 Moderate: vim security update | 0% Низкий | 7 месяцев назад | |
| RLSA-2026:4715 Moderate: vim security update | 0% Низкий | 8 месяцев назад | |
| RLSA-2026:4442 Moderate: vim security update | 0% Низкий | 8 месяцев назад | |
| ELSA-2026-5602 ELSA-2026-5602: vim security update (MODERATE) | 0% Низкий | 8 месяцев назад | |
| ELSA-2026-4715 ELSA-2026-4715: vim security update (MODERATE) | 0% Низкий | 8 месяцев назад | |
| ELSA-2026-4442 ELSA-2026-4442: vim security update (MODERATE) | 0% Низкий | 8 месяцев назад | |
| ALT-PU-2026-8017 ALT-PU-2026-8017: package `vim` update to version 9.2.0478-alt2 | CVSS3: 8.8 | 6 месяцев назад | |
| ALT-PU-2026-8499 ALT-PU-2026-8499: package `vim` update to version 9.2.0537-alt1 | CVSS3: 8.8 | 5 месяцев назад | |
| ELSA-2026-6617 ELSA-2026-6617: vim security update (IMPORTANT) | 6 месяцев назад |
Уязвимостей на страницу