RHSA-2026:6736HighCVSS 7.3

Red Hat Security Advisory: vim security update

Published
April 7, 2026
Last Modified
June 25, 2026

🔗 CVE IDs covered (4)

CVE-2026-25749 →CVE-2026-28417 →CVE-2026-28421 →CVE-2026-33412 →

📋 Description

CVE-2026-25749 — vim: Vim: Arbitrary code execution via 'helpfile' option processing CVE-2026-28417 — vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin CVE-2026-28421 — vim: Vim: Denial of service and information disclosure via crafted swap file CVE-2026-33412 — vim: Vim: Arbitrary code execution via command injection in glob() function

🔗 References (7)