RHSA-2026:8259HighCVSS 7.3
Red Hat Security Advisory: vim security update
🔗 CVE IDs covered (3)
📋 Description
CVE-2026-28417 — vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin CVE-2026-28421 — vim: Vim: Denial of service and information disclosure via crafted swap file CVE-2026-33412 — vim: Vim: Arbitrary code execution via command injection in glob() function
🔗 References (6)
- selfhttps://access.redhat.com/errata/RHSA-2026:8259
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2443455
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2443474
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2450907
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_8259.json