VDB

GCVE-110-MAGEIA-2026-167

GCVE-110-MAGEIA-2026-167
Advisory Published
Vulnetix · Advisory published May 30, 2026
Heap Buffer Overflow in spell file loading affects Vim < 9.2.0450. (CVE-2026-45130) Vimscript Code Injection in netrw NetrwMarkFile() via crafted filename affects Vim < 9.2.0480. (CVE-2026-43961) Command Injection in tar.vim affects Vim < 9.2.0479. (CVE-2026-46483) Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name affects Vim < 9.2.0495. Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex affects Vim < 9.2.0496.
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageiavim0 (affected), 9.2.498-1.mga9 (unaffected)—

References

Updated vim packages fix security vulnerabilities
advisory
Updated vim packages fix security vulnerabilities
issue
Updated vim packages fix security vulnerabilities
url
Updated vim packages fix security vulnerabilities
advisory
Updated vim packages fix security vulnerabilities
url
Updated vim packages fix security vulnerabilities
advisory
Updated vim packages fix security vulnerabilities
url
Updated vim packages fix security vulnerabilities
advisory
Updated vim packages fix security vulnerabilities
url
Updated vim packages fix security vulnerabilities
advisory
Updated vim packages fix security vulnerabilities
url
Updated vim packages fix security vulnerabilities
advisory

Browse GCVE Records

74,132 records in the GCVE database · Updated July 20, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›