Every CVE Search/ Get API key

CVE-2026-28420

Vim has Heap-based Buffer Overflow and OOB Read in :terminal

4.4 MediumFix available

Vim is an open source, command line text editor. Prior to version 9.2.0076, a heap-based buffer overflow WRITE and an out-of-bounds READ exist in Vim's terminal emulator when processing maximum combining characters from Unicode supplementary planes. Version 9.2.0076 fixes the issue.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
Low
Availability
Low

Exploit likelihood

0.21%Up 0.2 points since Feb 28, 2026
90%50%10%1%

What each source reports

CVE List Score used 4.4

Vim has Heap-based Buffer Overflow and OOB Read in :terminal

Vim is an open source, command line text editor. Prior to version 9.2.0076, a heap-based buffer overflow WRITE and an out-of-bounds READ exist in Vim's terminal emulator when processing maximum combining characters from Unicode supplementary planes. Version 9.2.0076 fixes the issue.

Record
CVE-2026-28420
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Weakness
CWE-122, CWE-125
Updated
2026-11-02
EUVDEUVD-2026-9088 4.4

Vim is an open source, command line text editor. Prior to version 9.2.0076, a heap-based buffer overflow WRITE and an out-of-bounds READ exist in Vim's terminal emulator when processing maximum combining characters from Unicode supplementary planes. Version 9.2.0076 fixes the issue.

Record
EUVD-2026-9088
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Updated
2026-11-02
NVD 4.4

Vim is an open source, command line text editor. Prior to version 9.2.0076, a heap-based buffer overflow WRITE and an out-of-bounds READ exist in Vim's terminal emulator when processing maximum combining characters from Unicode supplementary planes. Version 9.2.0076 fixes the issue.

Record
CVE-2026-28420
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Weakness
CWE-122, CWE-125
Updated
2026-11-02
OSVALPINE-CVE-2026-28420 4.4

Vim is an open source, command line text editor. Prior to version 9.2.0076, a heap-based buffer overflow WRITE and an out-of-bounds READ exist in Vim's terminal emulator when processing maximum combining characters from Unicode supplementary planes. Version 9.2.0076 fixes the issue.

Record
ALPINE-CVE-2026-28420
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Updated
2026-11-03
OSVBELL-CVE-2026-28420 4.4
Record
BELL-CVE-2026-28420
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Updated
2026-11-02
OSV 4.4

Vim has Heap-based Buffer Overflow and OOB Read in :terminal

Vim is an open source, command line text editor. Prior to version 9.2.0076, a heap-based buffer overflow WRITE and an out-of-bounds READ exist in Vim's terminal emulator when processing maximum combining characters from Unicode supplementary planes. Version 9.2.0076 fixes the issue.

Record
CVE-2026-28420
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Weakness
CWE-122, CWE-125
Updated
2026-11-02
Show 18 moreShow less
OSVDEBIAN-CVE-2026-28420 4.4

Vim is an open source, command line text editor. Prior to version 9.2.0076, a heap-based buffer overflow WRITE and an out-of-bounds READ exist in Vim's terminal emulator when processing maximum combining characters from Unicode supplementary planes. Version 9.2.0076 fixes the issue.

Record
DEBIAN-CVE-2026-28420
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Updated
2026-11-02
OSVOESA-2026-1565 7.8

vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems.

Security Fix(es):

Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the netrw standard plugin bundled with Vim. By inducing a user to open a crafted URL (e.g., using the scp:// protocol handler), an attacker can execute arbitrary shell commands with the privileges of the Vim process. Version 9.2.0073 fixes the issue.(CVE-2026-28417)

Vim is an open source, command line text editor. Prior to version 9.2.0074, a heap-based buffer overflow out-of-bounds read exists in Vim's Emacs-style tags file parsing logic. When processing a malformed tags file, Vim can be tricked into reading up to 7 bytes beyond the allocated memory boundary. Version 9.2.0074 fixes the issue.(CVE-2026-28418)

Vim is an open source, command line text editor. Prior to version 9.2.0075, a heap-based buffer underflow exists in Vim's Emacs-style tags file parsing logic. When processing a malformed tags file where a delimiter appears at the start of a line, Vim attempts to read memory immediately preceding the allocated buffer. Version 9.2.0075 fixes the issue.(CVE-2026-28419)

Vim is an open source, command line text editor. Prior to version 9.2.0076, a heap-based buffer overflow WRITE and an out-of-bounds READ exist in Vim's terminal emulator when processing maximum combining characters from Unicode supplementary planes. Version 9.2.0076 fixes the issue.(CVE-2026-28420)

Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault (SEGV) exist in Vim's swap file recovery logic. Both are caused by unvalidated fields read from crafted pointer blocks within a swap file. Version 9.2.0077 fixes the issue.(CVE-2026-28421)

Vim is an open-source, command-line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in the build_stl_str_hl() function when rendering a statusline with a multi-byte fill character on a very wide terminal. This vulnerability may lead to application crash or potential security risks.(CVE-2026-28422)

Record
OESA-2026-1565
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:66336 8.8

Red Hat Security Advisory: vim security update

Record
RHSA-2026:66336
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:66348 8.8

Red Hat Security Advisory: vim security update

Record
RHSA-2026:66348
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:66366 8.8

Red Hat Security Advisory: vim security update

Record
RHSA-2026:66366
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:66336 8.8

Important: vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor.

Security Fix(es):

  • vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator (CVE-2026-28420)

  • vim: Vim: Denial of Service via out-of-bounds write in terminal handling (CVE-2026-52859)

  • vim: Vim: Denial of Service via crafted spell file (CVE-2026-55892)

  • vim: Vim: Denial of Service via out-of-bounds write in spell sound-folding (CVE-2026-59857)

  • vim: Vim: Arbitrary command execution via crafted vimball (CVE-2026-73076)

  • vim: Vim: Heap buffer overflow allows arbitrary code execution (CVE-2026-73072)

  • vim: Vim: Arbitrary Code Execution via Crafted Netrw Menu Entries (CVE-2026-73078)

  • vim: Vim: Arbitrary Code Execution via Insecure Shell Command Handling (CVE-2026-73077)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:66336
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:66348 8.8

Important: vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor.

Security Fix(es):

  • vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator (CVE-2026-28420)

  • vim: Vim: Denial of Service via out-of-bounds write in terminal handling (CVE-2026-52859)

  • vim: Vim: Denial of Service via crafted spell file (CVE-2026-55892)

  • vim: Vim: Denial of Service via out-of-bounds write in spell sound-folding (CVE-2026-59857)

  • vim: Vim: Arbitrary command execution via crafted vimball (CVE-2026-73076)

  • vim: Vim: Heap buffer overflow allows arbitrary code execution (CVE-2026-73072)

  • vim: Vim: Arbitrary Code Execution via Crafted Netrw Menu Entries (CVE-2026-73078)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:66348
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:66366 8.8

Important: vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor.

Security Fix(es):

  • vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator (CVE-2026-28420)

  • vim: Vim: Denial of Service via out-of-bounds write in terminal handling (CVE-2026-52859)

  • vim: Vim: Denial of Service via crafted spell file (CVE-2026-55892)

  • vim: Vim: Denial of Service via out-of-bounds write in spell sound-folding (CVE-2026-59857)

  • vim: Vim: Arbitrary command execution via crafted vimball (CVE-2026-73076)

  • vim: Vim: Heap buffer overflow allows arbitrary code execution (CVE-2026-73072)

  • vim: Vim: Arbitrary Code Execution via Crafted Netrw Menu Entries (CVE-2026-73078)

  • vim: Vim: Arbitrary Code Execution via Insecure Shell Command Handling (CVE-2026-73077)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:66366
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-28420 4.4

Vim is an open source, command line text editor. Prior to version 9.2.0076, a heap-based buffer overflow WRITE and an out-of-bounds READ exist in Vim's terminal emulator when processing maximum combining characters from Unicode supplementary planes. Version 9.2.0076 fixes the issue.

Record
UBUNTU-CVE-2026-28420
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Updated
2026-11-02
OSVALSA-2026:66336 No score

Important: vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor.

Security Fix(es):

  • vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator (CVE-2026-28420)
  • vim: Vim: Denial of Service via out-of-bounds write in terminal handling (CVE-2026-52859)
  • vim: Vim: Denial of Service via crafted spell file (CVE-2026-55892)
  • vim: Vim: Denial of Service via out-of-bounds write in spell sound-folding (CVE-2026-59857)
  • vim: Vim: Arbitrary command execution via crafted vimball (CVE-2026-73076)
  • vim: Vim: Heap buffer overflow allows arbitrary code execution (CVE-2026-73072)
  • vim: Vim: Arbitrary Code Execution via Crafted Netrw Menu Entries (CVE-2026-73078)
  • vim: Vim: Arbitrary Code Execution via Insecure Shell Command Handling (CVE-2026-73077)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:66336
Updated
2026-11-02
OSVALSA-2026:66348 No score

Important: vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor.

Security Fix(es):

  • vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator (CVE-2026-28420)
  • vim: Vim: Denial of Service via out-of-bounds write in terminal handling (CVE-2026-52859)
  • vim: Vim: Denial of Service via crafted spell file (CVE-2026-55892)
  • vim: Vim: Denial of Service via out-of-bounds write in spell sound-folding (CVE-2026-59857)
  • vim: Vim: Arbitrary command execution via crafted vimball (CVE-2026-73076)
  • vim: Vim: Heap buffer overflow allows arbitrary code execution (CVE-2026-73072)
  • vim: Vim: Arbitrary Code Execution via Crafted Netrw Menu Entries (CVE-2026-73078)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:66348
Updated
2026-11-02
OSVALSA-2026:66366 No score

Important: vim security update

Vim (Vi IMproved) is an updated and improved version of the vi editor.

Security Fix(es):

  • vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator (CVE-2026-28420)
  • vim: Vim: Denial of Service via out-of-bounds write in terminal handling (CVE-2026-52859)
  • vim: Vim: Denial of Service via crafted spell file (CVE-2026-55892)
  • vim: Vim: Denial of Service via out-of-bounds write in spell sound-folding (CVE-2026-59857)
  • vim: Vim: Arbitrary command execution via crafted vimball (CVE-2026-73076)
  • vim: Vim: Heap buffer overflow allows arbitrary code execution (CVE-2026-73072)
  • vim: Vim: Arbitrary Code Execution via Crafted Netrw Menu Entries (CVE-2026-73078)
  • vim: Vim: Arbitrary Code Execution via Insecure Shell Command Handling (CVE-2026-73077)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:66366
Updated
2026-11-02
OSVAZL-78503 No score

CVE-2026-28420 affecting package vim for versions less than 9.2.0088-1

Vim is an open source, command line text editor. Prior to version 9.2.0076, a heap-based buffer overflow WRITE and an out-of-bounds READ exist in Vim's terminal emulator when processing maximum combining characters from Unicode supplementary planes. Version 9.2.0076 fixes the issue.

Record
AZL-78503
Updated
2026-11-02
OSVCLSA-2026-1774363216 No score

vim: Fix of 3 CVEs

  • CVE-2026-28420: fix heap-buffer-overflow in :terminal when processing Unicode combining characters from supplementary planes
  • CVE-2026-28418: fix OOB read in Emacs tags parsing with overlong tag file
  • CVE-2026-28419: fix heap-buffer-underflow in Emacs tags parsing when delimiter appears at start of line
Record
CLSA-2026-1774363216
Updated
2026-11-02
OSVMGASA-2026-0049 No score

Updated vim packages fix security vulnerabilities

OS Command Injection in netrw affects Vim < 9.2.0073. (CVE-2026-28417) Heap-based Buffer Overflow in Emacs tags parsing affects Vim < 9.2.0074. (CVE-2026-28418) Heap-based Buffer Underflow in Emacs tags parsing affects Vim < 9.2.0075. (CVE-2026-28419) Heap-based Buffer Overflow and OOB Read in :terminal affects Vim < 9.2.0076. (CVE-2026-28420) Multiple Vulnerabilities in Swap File Recovery affect Vim < 9.2.0077. (CVE-2026-28421) Stack-buffer-overflow in build_stl_str_hl() affects Vim < 9.2.0078. (CVE-2026-28422)

Record
MGASA-2026-0049
Updated
2026-11-02
OSVSUSE-SU-2026:0910-1 No score

Security update for vim

This update for vim fixes the following issues:

Update Vim to version 9.2.0110:

  • CVE-2025-53906: Fixed that malicious zip archive may cause a path traversal in Vim's zip (bsc#1246602).
  • CVE-2026-26269: Fixed Netbeans specialKeys stack buffer overflow (bsc#1258229).
  • CVE-2026-28417: Fixed that a crafted URL parsed by netrw plugin can lead to execute arbitrary shell commands (bsc#1259051).
  • CVE-2026-28418: Fixed that a malformed tags file can cause an heap-based buffer overflow out-of-bounds read (bsc#1259052)
  • CVE-2026-28419: Fixed processing a malformed tags file containing a delimiter can lead to a crash (bsc#1259053)
  • CVE-2026-28420: Fixed that processing maximum combining characters in terminal emulator can lead to heap-based buffer overflow write (bsc#1259054)
  • CVE-2026-28421: Fixed that a crafted swap file can cause a heap-buffer-overflow and a segmentation fault
  • CVE-2026-28422: Fixed that a malicious modeline or plugin can trigger a stack-buffer-overflow (bsc#1259056)
Record
SUSE-SU-2026:0910-1
Updated
2026-11-02
OSVSUSE-SU-2026:1051-1 No score

Security update for vim

This update for vim fixes the following issues:

Update Vim to version 9.2.0110:

  • CVE-2025-53906: malicious zip archive may cause a path traversal in Vim's zip (bsc#1246602).
  • CVE-2026-26269: Netbeans specialKeys stack buffer overflow (bsc#1258229).
  • CVE-2026-28417: Fixed that a crafted URL parsed by netrw plugin can lead to execute arbitrary shell commands (bsc#1259051).
  • CVE-2026-28418: Fixed that a malformed tags file can cause an heap-based buffer overflow out-of-bounds read (bsc#1259052)
  • CVE-2026-28419: Fixed processing a malformed tags file containing a delimiter can lead to a crash (bsc#1259053)
  • CVE-2026-28420: Fixed that processing maximum combining characters in terminal emulator can lead to heap-based buffer overflow write (bsc#1259054)
  • CVE-2026-28421: Fixed that a crafted swap file can cause a heap-buffer-overflow and a segmentation fault
  • CVE-2026-28422: Fixed that a malicious modeline or plugin can trigger a stack-buffer-overflow (bsc#1259056)
Record
SUSE-SU-2026:1051-1
Updated
2026-11-02
OSVSUSE-SU-2026:1095-1 No score

Security update for vim

This update for vim fixes the following issues:

Update Vim to version 9.2.0110:

  • CVE-2025-53906: Fixed that malicious zip archive may cause a path traversal in Vim's zip (bsc#1246602).
  • CVE-2026-26269: Fixed Netbeans specialKeys stack buffer overflow (bsc#1258229).
  • CVE-2026-28417: Fixed crafted URL parsed by netrw plugin can lead to execute arbitrary shell commands (bsc#1259051).
  • CVE-2026-28418: Fixed that a malformed tags file can cause an heap-based buffer overflow out-of-bounds read (bsc#1259052)
  • CVE-2026-28419: Fixed processing a malformed tags file containing a delimiter can lead to a crash (bsc#1259053)
  • CVE-2026-28420: Fixed that processing maximum combining characters in terminal emulator can lead to heap-based buffer overflow write (bsc#1259054)
  • CVE-2026-28421: Fixed that a crafted swap file can cause a heap-buffer-overflow and a segmentation fault
  • CVE-2026-28422: Fixed that a malicious modeline or plugin can trigger a stack-buffer-overflow (bsc#1259056)
Record
SUSE-SU-2026:1095-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
vim
Alpine:v3.23
 before 9.2.0078-r0
9.2.0078-r0
vim
Alpine:v3.24
 before 9.2.0078-r0
9.2.0078-r0
vim-X11
AlmaLinux:10
From an advisory covering 8 CVEs
 before 2:9.1.083-9.el10_2.20
2:9.1.083-9.el10_2.20
vim-common
AlmaLinux:10
From an advisory covering 8 CVEs
 before 2:9.1.083-9.el10_2.20
2:9.1.083-9.el10_2.20
vim-data
AlmaLinux:10
From an advisory covering 8 CVEs
 before 2:9.1.083-9.el10_2.20
2:9.1.083-9.el10_2.20
vim-enhanced
AlmaLinux:10
From an advisory covering 8 CVEs
 before 2:9.1.083-9.el10_2.20
2:9.1.083-9.el10_2.20
vim-filesystem
AlmaLinux:10
From an advisory covering 8 CVEs
 before 2:9.1.083-9.el10_2.20
2:9.1.083-9.el10_2.20
vim-minimal
AlmaLinux:10
From an advisory covering 8 CVEs
 before 2:9.1.083-9.el10_2.20
2:9.1.083-9.el10_2.20
xxd
AlmaLinux:10
From an advisory covering 8 CVEs
 before 2:9.1.083-9.el10_2.20
2:9.1.083-9.el10_2.20
vim-X11
AlmaLinux:8
From an advisory covering 7 CVEs
 before 2:8.0.1763-31.el8_10.7
2:8.0.1763-31.el8_10.7
Show 70 moreShow less
Affected packages
PackageAffectedFixed
vim-common
AlmaLinux:8
From an advisory covering 7 CVEs
 before 2:8.0.1763-31.el8_10.7
2:8.0.1763-31.el8_10.7
vim-enhanced
AlmaLinux:8
From an advisory covering 7 CVEs
 before 2:8.0.1763-31.el8_10.7
2:8.0.1763-31.el8_10.7
vim-filesystem
AlmaLinux:8
From an advisory covering 7 CVEs
 before 2:8.0.1763-31.el8_10.7
2:8.0.1763-31.el8_10.7
vim-minimal
AlmaLinux:8
From an advisory covering 7 CVEs
 before 2:8.0.1763-31.el8_10.7
2:8.0.1763-31.el8_10.7
vim-X11
AlmaLinux:9
From an advisory covering 8 CVEs
 before 2:8.2.2637-26.el9_8.21
2:8.2.2637-26.el9_8.21
vim-common
AlmaLinux:9
From an advisory covering 8 CVEs
 before 2:8.2.2637-26.el9_8.21
2:8.2.2637-26.el9_8.21
vim-enhanced
AlmaLinux:9
From an advisory covering 8 CVEs
 before 2:8.2.2637-26.el9_8.21
2:8.2.2637-26.el9_8.21
vim-filesystem
AlmaLinux:9
From an advisory covering 8 CVEs
 before 2:8.2.2637-26.el9_8.21
2:8.2.2637-26.el9_8.21
vim-minimal
AlmaLinux:9
From an advisory covering 8 CVEs
 before 2:8.2.2637-26.el9_8.21
2:8.2.2637-26.el9_8.21
vim
Azure Linux:3
 before 9.2.0088-1
9.2.0088-1
vim
Alpaquita:23
 9.0.0820-r2 up to 9.2.0078-r0
9.2.0078-r0
vim
Alpaquita:25
 9.1.1415-r0 up to 9.2.0078-r0
9.2.0078-r0
vim
Alpaquita:stream
 9.0.1395-r0 up to 9.2.0078-r0
9.2.0078-r0
vim-X11
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 2:8.2.2637-22.el9_6.1.tuxcare.els5
2:8.2.2637-22.el9_6.1.tuxcare.els5
vim-common
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 2:8.2.2637-22.el9_6.1.tuxcare.els5
2:8.2.2637-22.el9_6.1.tuxcare.els5
vim-enhanced
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 2:8.2.2637-22.el9_6.1.tuxcare.els5
2:8.2.2637-22.el9_6.1.tuxcare.els5
vim-filesystem
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 2:8.2.2637-22.el9_6.1.tuxcare.els5
2:8.2.2637-22.el9_6.1.tuxcare.els5
vim-minimal
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 2:8.2.2637-22.el9_6.1.tuxcare.els5
2:8.2.2637-22.el9_6.1.tuxcare.els5
vim
Debian:12
 All versions, plus listed versions
2:9.0.1378-22:9.0.1378-2+deb12u12:9.0.1378-2+deb12u22:9.0.1658-12:9.0.1672-1
Show 40 moreShow less
2:9.0.1894-12:9.0.2018-12:9.0.2087-12:9.0.2103-12:9.0.2116-12:9.0.2189-12:9.1.0-12:9.1.0016-12:9.1.0199-12:9.1.0374-12:9.1.0377-12:9.1.0496-12:9.1.0698-12:9.1.0709-12:9.1.0709-22:9.1.0777-12:9.1.0861-12:9.1.0967-12:9.1.0967-22:9.1.1113-12:9.1.1230-12:9.1.1230-22:9.1.1385-12:9.1.1766-12:9.1.1829-12:9.1.1846-12:9.1.1882-12:9.1.2103-12:9.1.2141-12:9.2.0119-12:9.2.0136-12:9.2.0218-12:9.2.0315-12:9.2.0338-12:9.2.0355-12:9.2.0428-12:9.2.0461-12:9.2.0524-12:9.2.0782-12:9.2.0858-1
 None known
vim
Debian:13
 before 2:9.1.1230-2+deb13u1, plus listed versions
2:9.1.1230-2
2:9.1.1230-2+deb13u1
vim
Debian:14
 before 2:9.2.0119-1, plus listed versions
2:9.1.1230-22:9.1.1385-12:9.1.1766-12:9.1.1829-12:9.1.1846-12:9.1.1882-12:9.1.2103-12:9.1.2141-1
2:9.2.0119-1
vim
Mageia:9
From an advisory covering 6 CVEs
 before 9.2.106-1.mga9
9.2.106-1.mga9
vim
openEuler:24.03-LTS-SP2
From an advisory covering 6 CVEs
 before 9.0.2092-26.oe2403sp2
9.0.2092-26.oe2403sp2
vim
openEuler:24.03-LTS-SP3
From an advisory covering 6 CVEs
 before 9.0.2092-26.oe2403sp3
9.0.2092-26.oe2403sp3
vim
openEuler:20.03-LTS-SP4
From an advisory covering 6 CVEs
 before 9.0-40.oe2003sp4
9.0-40.oe2003sp4
vim
openEuler:22.03-LTS-SP4
From an advisory covering 6 CVEs
 before 9.0-40.oe2203sp4
9.0-40.oe2203sp4
vim
openEuler:24.03-LTS
From an advisory covering 6 CVEs
 before 9.0.2092-26.oe2403sp1
9.0.2092-26.oe2403sp1
vim
openEuler:24.03-LTS-SP1
From an advisory covering 6 CVEs
 before 9.0.2092-26.oe2403sp1
9.0.2092-26.oe2403sp1
vim-X11
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 2:9.1.083-9.el10_2.20
2:9.1.083-9.el10_2.20
vim-enhanced
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 2:9.1.083-9.el10_2.20
2:9.1.083-9.el10_2.20
vim
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 2:9.1.083-9.el10_2.20
2:9.1.083-9.el10_2.20
vim-common
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 2:9.1.083-9.el10_2.20
2:9.1.083-9.el10_2.20
vim-X11
Red Hat:enterprise_linux:8::appstream
From an advisory covering 7 CVEs
 before 2:8.0.1763-31.el8_10.7
2:8.0.1763-31.el8_10.7
vim-enhanced
Red Hat:enterprise_linux:8::appstream
From an advisory covering 7 CVEs
 before 2:8.0.1763-31.el8_10.7
2:8.0.1763-31.el8_10.7
vim
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 2:8.0.1763-31.el8_10.7
2:8.0.1763-31.el8_10.7
vim-common
Red Hat:enterprise_linux:8::appstream
From an advisory covering 7 CVEs
 before 2:8.0.1763-31.el8_10.7
2:8.0.1763-31.el8_10.7
vim-X11
Red Hat:enterprise_linux:9::appstream
From an advisory covering 8 CVEs
 before 2:8.2.2637-26.el9_8.21
2:8.2.2637-26.el9_8.21
vim-enhanced
Red Hat:enterprise_linux:9::appstream
From an advisory covering 8 CVEs
 before 2:8.2.2637-26.el9_8.21
2:8.2.2637-26.el9_8.21
vim
Red Hat:enterprise_linux:9::baseos
From an advisory covering 8 CVEs
 before 2:8.2.2637-26.el9_8.21
2:8.2.2637-26.el9_8.21
vim-common
Red Hat:enterprise_linux:9::appstream
From an advisory covering 8 CVEs
 before 2:8.2.2637-26.el9_8.21
2:8.2.2637-26.el9_8.21
vim
Rocky Linux:10
From an advisory covering 8 CVEs
 before 2:9.1.083-9.el10_2.20
2:9.1.083-9.el10_2.20
vim
Rocky Linux:8
From an advisory covering 7 CVEs
 before 2:8.0.1763-31.el8_10.7
2:8.0.1763-31.el8_10.7
vim
Rocky Linux:9
From an advisory covering 8 CVEs
 before 2:8.2.2637-26.el9_8.21
2:8.2.2637-26.el9_8.21
vim
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 8 CVEs
 before 9.2.0110-150500.20.43.1
9.2.0110-150500.20.43.1
vim
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 8 CVEs
 before 9.2.0110-150500.20.43.1
9.2.0110-150500.20.43.1
vim
SUSE:Linux Enterprise Module for Desktop Applications 15 SP7
From an advisory covering 8 CVEs
 before 9.2.0110-150500.20.43.1
9.2.0110-150500.20.43.1
vim
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 8 CVEs
 before 9.2.0110-150500.20.43.1
9.2.0110-150500.20.43.1
vim
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 8 CVEs
 before 9.2.0110-150500.20.43.1
9.2.0110-150500.20.43.1
vim
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 8 CVEs
 before 9.2.0110-150500.20.43.1
9.2.0110-150500.20.43.1
vim
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 8 CVEs
 before 9.2.0110-150500.20.43.1
9.2.0110-150500.20.43.1
vim
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 8 CVEs
 before 9.2.0110-150500.20.43.1
9.2.0110-150500.20.43.1
vim
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 8 CVEs
 before 9.2.0110-150500.20.43.1
9.2.0110-150500.20.43.1
vim
openSUSE:Leap 15.6
From an advisory covering 8 CVEs
 before 9.2.0110-150500.20.43.1
9.2.0110-150500.20.43.1
vim
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 8 CVEs
 before 9.2.0110-17.59.1
9.2.0110-17.59.1
vim
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 8 CVEs
 before 9.2.0110-17.59.1
9.2.0110-17.59.1
vim
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 8 CVEs
 before 9.2.0110-150000.5.86.1
9.2.0110-150000.5.86.1
vim
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 8 CVEs
 before 9.2.0110-150000.5.86.1
9.2.0110-150000.5.86.1
vim
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 8 CVEs
 before 9.2.0110-150000.5.86.1
9.2.0110-150000.5.86.1
vim
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 8 CVEs
 before 9.2.0110-150000.5.86.1
9.2.0110-150000.5.86.1
vim
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 8 CVEs
 before 9.2.0110-150000.5.86.1
9.2.0110-150000.5.86.1
vim
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 8 CVEs
 before 9.2.0110-150000.5.86.1
9.2.0110-150000.5.86.1
vim
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 8 CVEs
 before 9.2.0110-150000.5.86.1
9.2.0110-150000.5.86.1
vim
Ubuntu:Pro:14.04:LTS
 before 2:7.4.052-1ubuntu3.1+esm23, plus listed versions
2:7.4.000-1ubuntu22:7.4.052-1ubuntu12:7.4.052-1ubuntu22:7.4.052-1ubuntu32:7.4.052-1ubuntu3.1
Show 21 moreShow less
2:7.4.052-1ubuntu3.1+esm12:7.4.052-1ubuntu3.1+esm32:7.4.052-1ubuntu3.1+esm42:7.4.052-1ubuntu3.1+esm52:7.4.052-1ubuntu3.1+esm62:7.4.052-1ubuntu3.1+esm72:7.4.052-1ubuntu3.1+esm82:7.4.052-1ubuntu3.1+esm92:7.4.052-1ubuntu3.1+esm102:7.4.052-1ubuntu3.1+esm112:7.4.052-1ubuntu3.1+esm122:7.4.052-1ubuntu3.1+esm132:7.4.052-1ubuntu3.1+esm142:7.4.052-1ubuntu3.1+esm152:7.4.052-1ubuntu3.1+esm162:7.4.052-1ubuntu3.1+esm172:7.4.052-1ubuntu3.1+esm182:7.4.052-1ubuntu3.1+esm192:7.4.052-1ubuntu3.1+esm202:7.4.052-1ubuntu3.1+esm212:7.4.052-1ubuntu3.1+esm22
2:7.4.052-1ubuntu3.1+esm23
vim
Ubuntu:Pro:16.04:LTS
 before 2:7.4.1689-3ubuntu1.5+esm29, plus listed versions
2:7.4.712-2ubuntu42:7.4.826-1ubuntu12:7.4.826-1ubuntu22:7.4.826-1ubuntu32:7.4.963-1ubuntu1
Show 32 moreShow less
2:7.4.963-1ubuntu42:7.4.963-1ubuntu52:7.4.1689-3ubuntu12:7.4.1689-3ubuntu1.12:7.4.1689-3ubuntu1.22:7.4.1689-3ubuntu1.32:7.4.1689-3ubuntu1.42:7.4.1689-3ubuntu1.52:7.4.1689-3ubuntu1.5+esm22:7.4.1689-3ubuntu1.5+esm32:7.4.1689-3ubuntu1.5+esm42:7.4.1689-3ubuntu1.5+esm52:7.4.1689-3ubuntu1.5+esm62:7.4.1689-3ubuntu1.5+esm72:7.4.1689-3ubuntu1.5+esm82:7.4.1689-3ubuntu1.5+esm102:7.4.1689-3ubuntu1.5+esm112:7.4.1689-3ubuntu1.5+esm122:7.4.1689-3ubuntu1.5+esm132:7.4.1689-3ubuntu1.5+esm142:7.4.1689-3ubuntu1.5+esm152:7.4.1689-3ubuntu1.5+esm172:7.4.1689-3ubuntu1.5+esm182:7.4.1689-3ubuntu1.5+esm192:7.4.1689-3ubuntu1.5+esm202:7.4.1689-3ubuntu1.5+esm222:7.4.1689-3ubuntu1.5+esm232:7.4.1689-3ubuntu1.5+esm242:7.4.1689-3ubuntu1.5+esm252:7.4.1689-3ubuntu1.5+esm262:7.4.1689-3ubuntu1.5+esm272:7.4.1689-3ubuntu1.5+esm28
2:7.4.1689-3ubuntu1.5+esm29
vim
Ubuntu:Pro:18.04:LTS
 before 2:8.0.1453-1ubuntu1.13+esm14, plus listed versions
2:8.0.0197-4ubuntu52:8.0.1144-1ubuntu12:8.0.1401-1ubuntu12:8.0.1401-1ubuntu22:8.0.1401-1ubuntu3
Show 24 moreShow less
2:8.0.1453-1ubuntu12:8.0.1453-1ubuntu1.12:8.0.1453-1ubuntu1.32:8.0.1453-1ubuntu1.42:8.0.1453-1ubuntu1.62:8.0.1453-1ubuntu1.72:8.0.1453-1ubuntu1.82:8.0.1453-1ubuntu1.92:8.0.1453-1ubuntu1.102:8.0.1453-1ubuntu1.112:8.0.1453-1ubuntu1.122:8.0.1453-1ubuntu1.132:8.0.1453-1ubuntu1.13+esm12:8.0.1453-1ubuntu1.13+esm32:8.0.1453-1ubuntu1.13+esm42:8.0.1453-1ubuntu1.13+esm52:8.0.1453-1ubuntu1.13+esm62:8.0.1453-1ubuntu1.13+esm72:8.0.1453-1ubuntu1.13+esm82:8.0.1453-1ubuntu1.13+esm92:8.0.1453-1ubuntu1.13+esm102:8.0.1453-1ubuntu1.13+esm112:8.0.1453-1ubuntu1.13+esm122:8.0.1453-1ubuntu1.13+esm13
2:8.0.1453-1ubuntu1.13+esm14
vim
Ubuntu:Pro:20.04:LTS
 before 2:8.1.2269-1ubuntu5.32+esm2, plus listed versions
2:8.1.0875-5ubuntu22:8.1.0875-5ubuntu32:8.1.0875-5ubuntu42:8.1.2269-1ubuntu12:8.1.2269-1ubuntu4
Show 26 moreShow less
2:8.1.2269-1ubuntu52:8.1.2269-1ubuntu5.32:8.1.2269-1ubuntu5.42:8.1.2269-1ubuntu5.62:8.1.2269-1ubuntu5.72:8.1.2269-1ubuntu5.82:8.1.2269-1ubuntu5.92:8.1.2269-1ubuntu5.112:8.1.2269-1ubuntu5.122:8.1.2269-1ubuntu5.132:8.1.2269-1ubuntu5.142:8.1.2269-1ubuntu5.152:8.1.2269-1ubuntu5.162:8.1.2269-1ubuntu5.172:8.1.2269-1ubuntu5.182:8.1.2269-1ubuntu5.202:8.1.2269-1ubuntu5.212:8.1.2269-1ubuntu5.222:8.1.2269-1ubuntu5.232:8.1.2269-1ubuntu5.242:8.1.2269-1ubuntu5.252:8.1.2269-1ubuntu5.262:8.1.2269-1ubuntu5.292:8.1.2269-1ubuntu5.302:8.1.2269-1ubuntu5.312:8.1.2269-1ubuntu5.32
2:8.1.2269-1ubuntu5.32+esm2
vim
Ubuntu:22.04:LTS
 before 2:8.2.3995-1ubuntu2.26, plus listed versions
2:8.2.2434-3ubuntu32:8.2.2434-3ubuntu42:8.2.3565-1ubuntu12:8.2.3565-1ubuntu22:8.2.3565-1ubuntu3
Show 24 moreShow less
2:8.2.3565-1ubuntu52:8.2.3995-1ubuntu12:8.2.3995-1ubuntu22:8.2.3995-1ubuntu2.12:8.2.3995-1ubuntu2.32:8.2.3995-1ubuntu2.42:8.2.3995-1ubuntu2.52:8.2.3995-1ubuntu2.72:8.2.3995-1ubuntu2.82:8.2.3995-1ubuntu2.92:8.2.3995-1ubuntu2.102:8.2.3995-1ubuntu2.112:8.2.3995-1ubuntu2.122:8.2.3995-1ubuntu2.132:8.2.3995-1ubuntu2.152:8.2.3995-1ubuntu2.162:8.2.3995-1ubuntu2.172:8.2.3995-1ubuntu2.182:8.2.3995-1ubuntu2.192:8.2.3995-1ubuntu2.202:8.2.3995-1ubuntu2.212:8.2.3995-1ubuntu2.222:8.2.3995-1ubuntu2.232:8.2.3995-1ubuntu2.24
2:8.2.3995-1ubuntu2.26
vim
Ubuntu:24.04:LTS
 before 2:9.1.0016-1ubuntu7.10, plus listed versions
2:9.0.1672-1ubuntu22:9.0.2087-1ubuntu12:9.0.2116-1ubuntu12:9.0.2116-1ubuntu22:9.0.2184-0ubuntu1
Show 14 moreShow less
2:9.0.2189-1ubuntu12:9.1.0-1ubuntu12:9.1.0016-1ubuntu22:9.1.0016-1ubuntu62:9.1.0016-1ubuntu72:9.1.0016-1ubuntu7.12:9.1.0016-1ubuntu7.22:9.1.0016-1ubuntu7.32:9.1.0016-1ubuntu7.42:9.1.0016-1ubuntu7.52:9.1.0016-1ubuntu7.62:9.1.0016-1ubuntu7.72:9.1.0016-1ubuntu7.82:9.1.0016-1ubuntu7.9
2:9.1.0016-1ubuntu7.10
vim
Ubuntu:25.10
 before 2:9.1.0967-1ubuntu6.1, plus listed versions
2:9.1.0967-1ubuntu42:9.1.0967-1ubuntu52:9.1.0967-1ubuntu6
2:9.1.0967-1ubuntu6.1
vim
Ubuntu:26.04:LTS
 before 2:9.1.2141-1ubuntu2, plus listed versions
2:9.1.0967-1ubuntu62:9.1.1882-1ubuntu12:9.1.1882-1ubuntu22:9.1.2141-1ubuntu1
2:9.1.2141-1ubuntu2

History

History
RecordedChangedSources
affected, facts
affectedOSV
first indexedCVE List, EUVD, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-28420 is a medium vulnerability (CVSS 4.4) in Vim, published February 27, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.21%, the 10th percentile. Fixed in vim 9.2.0078-r0.

References

Show 107 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open