RHSA-2026:57614

Vulnerability from csaf_redhat - Published: 2026-08-20 16:42 - Updated: 2026-09-21 17:23
Summary
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Severity
Important
Notes
Topic: An update for Red Hat Hardened Images RPMs is now available.
Details: This update includes the following RPMs: vim: * vim-X11-9.2.967-1.1.hum1 (aarch64, x86_64) * vim-common-9.2.967-1.1.hum1 (aarch64, x86_64) * vim-data-9.2.967-1.1.hum1 (noarch) * vim-default-editor-9.2.967-1.1.hum1 (noarch) * vim-enhanced-9.2.967-1.1.hum1 (aarch64, x86_64) * vim-filesystem-9.2.967-1.1.hum1 (noarch) * vim-minimal-9.2.967-1.1.hum1 (aarch64, x86_64) * xxd-9.2.967-1.1.hum1 (aarch64, x86_64) * vim-9.2.967-1.1.hum1.src (src)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-34982

A flaw was found in Vim. A modeline is used to set specific editor options directly from a text file. However, the `complete`, `guitabtooltip`, `printheader` options and the `mapset` function lack proper security checks, allowing an attacker to bypass restrictions and cause arbitrary OS command execution.

8.2 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64 —
Vendor Fix fix
Workaround
Threats
Impact Important
CVE-2026-35177

A flaw was found in Vim's zip.vim plugin. A local user could be tricked into opening a specially crafted zip archive, which would allow a path traversal bypass. This vulnerability enables an attacker to overwrite arbitrary files on the system, potentially leading to data integrity issues or further system compromise.

4.1 (Medium)
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:L
CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products
Fixed 17 products, the same list as for CVE-2026-34982
Threats
Impact Moderate
CVE-2026-39881

A flaw was found in Vim. A command injection vulnerability in Vim's NetBeans interface allows a malicious NetBeans server to execute arbitrary Ex commands when Vim connects to it. This occurs due to unsanitized strings in the defineAnnoType and specialKeys protocol messages, leading to arbitrary code execution.

5.0 (Medium)
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:N
CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products
Fixed 17 products, the same list as for CVE-2026-34982
Threats
Impact Moderate
CVE-2026-41411

A flaw was found in Vim, an open-source command-line text editor. This command injection vulnerability occurs during tag file processing. A local user could craft a malicious tags file containing backtick syntax in the filename field. When Vim resolves a tag from this file, it executes the embedded command via the system shell, leading to arbitrary code execution with the privileges of the running user.

7.3 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products
Fixed 17 products, the same list as for CVE-2026-34982
Threats
Impact Moderate
CVE-2026-43961

A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the quoted context during mark/unmark operations, allowing arbitrary Vimscript execution. This can be leveraged to run shell commands with the privileges of the user running Vim.

7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-94 - Improper Control of Generation of Code ('Code Injection')
Affected products
Fixed 17 products, the same list as for CVE-2026-34982
Threats
Impact Important
CVE-2026-44656

A flaw was found in Vim, an open-source command-line text editor. An attacker who controls the contents of a file can exploit an OS command injection vulnerability in Vim's `:find` command-line completion. This occurs when the `path` option, which can be set from a modeline, contains backtick-enclosed shell commands. These commands are then executed when a user opens the malicious file and triggers `:find` completion, leading to arbitrary command execution.

5.3 (Medium)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products
Fixed 17 products, the same list as for CVE-2026-34982
Threats
Impact Moderate
CVE-2026-45130

A flaw was found in Vim, an open-source command-line text editor. A heap buffer overflow exists in the `read_compound()` function when processing a specially crafted spell file (.spl) with UTF-8 encoding active. A remote attacker could exploit this by convincing a user to open a text file containing a malicious modeline, which could then load a planted malicious spell file. This could lead to a heap overflow, potentially resulting in an application-level denial of service.

6.6 (Medium)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
CWE-190 - Integer Overflow or Wraparound
Affected products
Fixed 17 products, the same list as for CVE-2026-34982
Threats
Impact Moderate
CVE-2026-46483

A flaw was found in Vim. When decompressing .tgz archives, the Vimuntar function builds shell commands using shellescape() without the {special} flag. This allows a specially crafted archive filename to trigger Vim cmdline-special expansion and execute arbitrary commands in the context of the current user.

7.0 (High)
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products
Fixed 17 products, the same list as for CVE-2026-34982
Threats
Impact Moderate
CVE-2026-47162

A flaw was found in Vim, an open-source text editor. This vulnerability, located in the netrw plugin, involves a code injection issue when the editor processes directory paths. A malicious directory name, if crafted by an attacker, could bypass security measures and allow for the execution of unauthorized commands. This could lead to arbitrary code execution on the affected system.

7.3 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CWE-140 - Improper Neutralization of Delimiters
Affected products
Fixed 17 products, the same list as for CVE-2026-34982
Threats
Impact Important
CVE-2026-47167

A flaw was found in Vim, a command-line text editor. This vulnerability, identified as a code injection, affects the cucumber filetype plugin when Vim is configured with Ruby support. An attacker could exploit this by creating a malicious repository containing specially crafted step-definition patterns. If a user opens this repository and triggers a specific function, the crafted patterns are unsafely processed, potentially allowing the attacker to execute unauthorized commands on the user's system.

7.3 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CWE-94 - Improper Control of Generation of Code ('Code Injection')
Affected products
Fixed 17 products, the same list as for CVE-2026-34982
Threats
Impact Important
CVE-2026-52858

A flaw was found in Vim, a widely used command-line text editor. This vulnerability allows a local attacker to execute arbitrary code on the system. By opening a specially crafted Python file and then triggering the omni-completion feature, the attacker can cause Vim to run malicious code from a sibling Python package. This could lead to a complete compromise of the user's system.

7.3 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CWE-94 - Improper Control of Generation of Code ('Code Injection')
Affected products
Fixed 17 products, the same list as for CVE-2026-34982
Threats
Impact Important
CVE-2026-52859

A flaw was found in Vim, an open-source command-line text editor. This vulnerability allows a program displaying output in a Vim terminal window to trigger an out-of-bounds write by sending a specific byte sequence. This can lead to a crash of the Vim application, resulting in a Denial of Service (DoS) for the user.

5.0 (Medium)
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
CWE-787 - Out-of-bounds Write
Affected products
Fixed 17 products, the same list as for CVE-2026-34982
Threats
Impact Moderate
CVE-2026-52860

A flaw was found in Vim, an open-source command-line text editor. The Python omni-completion feature executes reconstructed function and class definitions from the current buffer. A remote attacker can exploit this by crafting a hostile buffer, leading to the execution of attacker-controlled Python expressions during omni-completion. This vulnerability can result in arbitrary code execution.

8.0 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CWE-94 - Improper Control of Generation of Code ('Code Injection')
Affected products
Fixed 17 products, the same list as for CVE-2026-34982
Threats
Impact Important
CVE-2026-57451

A flaw in Vim allows an attacker to cause a Denial of Service (DoS) via an application crash. If a user opens a maliciously crafted undo file, an out-of-bounds read is triggered in the get_text_props() function due to missing length validation on property counts.

5.5 (Medium)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-125 - Out-of-bounds Read
Affected products
Fixed 17 products, the same list as for CVE-2026-34982
Threats
Impact Moderate
CVE-2026-57453

A security vulnerability exists in the Vim text editor. If a user opens a specially crafted ZIP file in Vim, it can trick the application into running hidden, harmful commands on their computer. This specific issue is only triggered if Vim relies on PowerShell to open the ZIP file.

5.8 (Medium)
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:L
CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products
Fixed 17 products, the same list as for CVE-2026-34982
Threats
Impact Moderate
CVE-2026-57454

A flaw was found in Vim, an open source command-line text editor. A local attacker could exploit this vulnerability by providing a specially crafted undo or swap file. When Vim processes this file, an out-of-bounds read occurs, which can lead to the disclosure of sensitive information from memory or cause the application to crash, resulting in a denial of service (DoS).

CWE-125 - Out-of-bounds Read
Affected products
Fixed 17 products, the same list as for CVE-2026-34982
Threats
Impact Moderate
CVE-2026-73073

A flaw was found in Vim, an open-source command-line text editor. An attacker could craft a malicious tags file that, when processed by Vim's C omni-completion feature, leads to insufficient escaping of input. This vulnerability allows for the execution of arbitrary Ex commands and, subsequently, operating-system commands on the user's system. Successful exploitation requires a user to open a C file from an attacker-controlled tree and invoke C omni-completion on a member access whose type is resolved from the malicious tags file.

7.3 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products
Fixed 17 products, the same list as for CVE-2026-34982
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2026:57614 self
https://images.redhat.com/ external
https://access.redhat.com/security/cve/CVE-2026-73073 external
https://access.redhat.com/security/updates/classi… external
https://access.redhat.com/security/cve/CVE-2026-57451 external
https://access.redhat.com/security/cve/CVE-2026-57453 external
https://access.redhat.com/security/cve/CVE-2026-57454 external
https://access.redhat.com/security/cve/CVE-2026-52860 external
https://access.redhat.com/security/cve/CVE-2026-52858 external
https://access.redhat.com/security/cve/CVE-2026-52859 external
https://access.redhat.com/security/cve/CVE-2026-47167 external
https://access.redhat.com/security/cve/CVE-2026-47162 external
https://access.redhat.com/security/cve/CVE-2026-46483 external
https://access.redhat.com/security/cve/CVE-2026-45130 external
https://access.redhat.com/security/cve/CVE-2026-44656 external
https://access.redhat.com/security/cve/CVE-2026-43961 external
https://access.redhat.com/security/cve/CVE-2026-41411 external
https://access.redhat.com/security/cve/CVE-2026-35177 external
https://access.redhat.com/security/cve/CVE-2026-34982 external
https://access.redhat.com/security/cve/CVE-2026-39881 external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-34982 self
https://bugzilla.redhat.com/show_bug.cgi?id=2455400 external
https://www.cve.org/CVERecord?id=CVE-2026-34982 external
https://nvd.nist.gov/vuln/detail/CVE-2026-34982 external
http://www.openwall.com/lists/oss-security/2026/04/01/1 external
https://github.com/vim/vim/commit/75661a66a1db1e1… external
https://github.com/vim/vim/releases/tag/v9.2.0276 external
https://github.com/vim/vim/security/advisories/GH… external
https://access.redhat.com/security/cve/CVE-2026-35177 self
https://bugzilla.redhat.com/show_bug.cgi?id=2455542 external
https://www.cve.org/CVERecord?id=CVE-2026-35177 external
https://nvd.nist.gov/vuln/detail/CVE-2026-35177 external
https://github.com/vim/vim/security/advisories/GH… external
https://access.redhat.com/security/cve/CVE-2026-39881 self
https://bugzilla.redhat.com/show_bug.cgi?id=2456722 external
https://www.cve.org/CVERecord?id=CVE-2026-39881 external
https://nvd.nist.gov/vuln/detail/CVE-2026-39881 external
https://github.com/vim/vim/commit/7ab76a86048ed49… external
https://github.com/vim/vim/releases/tag/v9.2.0316 external
https://github.com/vim/vim/security/advisories/GH… external
https://access.redhat.com/security/cve/CVE-2026-41411 self
https://bugzilla.redhat.com/show_bug.cgi?id=2461614 external
https://www.cve.org/CVERecord?id=CVE-2026-41411 external
https://nvd.nist.gov/vuln/detail/CVE-2026-41411 external
https://github.com/vim/vim/commit/c78194e41d5a0b0… external
https://github.com/vim/vim/releases/tag/v9.2.0357 external
https://github.com/vim/vim/security/advisories/GH… external
https://access.redhat.com/security/cve/CVE-2026-43961 self
https://bugzilla.redhat.com/show_bug.cgi?id=2460434 external
https://www.cve.org/CVERecord?id=CVE-2026-43961 external
https://nvd.nist.gov/vuln/detail/CVE-2026-43961 external
https://github.com/vim/vim/security/advisories/GH… external
https://access.redhat.com/security/cve/CVE-2026-44656 self
https://bugzilla.redhat.com/show_bug.cgi?id=2468420 external
https://www.cve.org/CVERecord?id=CVE-2026-44656 external
https://nvd.nist.gov/vuln/detail/CVE-2026-44656 external
https://github.com/vim/vim/commit/190cb3c2b9c769a… external
https://github.com/vim/vim/releases/tag/v9.2.0435 external
https://github.com/vim/vim/security/advisories/GH… external
https://access.redhat.com/security/cve/CVE-2026-45130 self
https://bugzilla.redhat.com/show_bug.cgi?id=2468422 external
https://www.cve.org/CVERecord?id=CVE-2026-45130 external
https://nvd.nist.gov/vuln/detail/CVE-2026-45130 external
https://github.com/vim/vim/commit/92993329178cb1f… external
https://github.com/vim/vim/releases/tag/v9.2.0450 external
https://github.com/vim/vim/security/advisories/GH… external
https://access.redhat.com/security/cve/CVE-2026-46483 self
https://bugzilla.redhat.com/show_bug.cgi?id=2477915 external
https://www.cve.org/CVERecord?id=CVE-2026-46483 external
https://nvd.nist.gov/vuln/detail/CVE-2026-46483 external
https://github.com/vim/vim/commit/3fb5e58fbc63d86… external
https://github.com/vim/vim/releases/tag/v9.2.0479 external
https://github.com/vim/vim/security/advisories/GH… external
https://access.redhat.com/security/cve/CVE-2026-47162 self
https://bugzilla.redhat.com/show_bug.cgi?id=2487964 external
https://www.cve.org/CVERecord?id=CVE-2026-47162 external
https://nvd.nist.gov/vuln/detail/CVE-2026-47162 external
https://github.com/vim/vim/commit/f08ab2f4d7d2947… external
https://github.com/vim/vim/releases/tag/v9.2.0495 external
https://github.com/vim/vim/security/advisories/GH… external
https://access.redhat.com/security/cve/CVE-2026-47167 self
https://bugzilla.redhat.com/show_bug.cgi?id=2487996 external
https://www.cve.org/CVERecord?id=CVE-2026-47167 external
https://nvd.nist.gov/vuln/detail/CVE-2026-47167 external
https://github.com/vim/vim/commit/a65a52d684bc585… external
https://github.com/vim/vim/releases/tag/v9.2.0496 external
https://github.com/vim/vim/security/advisories/GH… external
https://access.redhat.com/security/cve/CVE-2026-52858 self
https://bugzilla.redhat.com/show_bug.cgi?id=2487981 external
https://www.cve.org/CVERecord?id=CVE-2026-52858 external
https://nvd.nist.gov/vuln/detail/CVE-2026-52858 external
https://github.com/vim/vim/commit/4b850457e12e1a6… external
https://github.com/vim/vim/releases/tag/v9.2.0561 external
https://github.com/vim/vim/security/advisories/GH… external
https://access.redhat.com/security/cve/CVE-2026-52859 self
https://bugzilla.redhat.com/show_bug.cgi?id=2487989 external
https://www.cve.org/CVERecord?id=CVE-2026-52859 external
https://nvd.nist.gov/vuln/detail/CVE-2026-52859 external
https://github.com/vim/vim/commit/63680c6d3d52477… external
https://github.com/vim/vim/releases/tag/v9.2.0565 external
https://github.com/vim/vim/security/advisories/GH… external
https://access.redhat.com/security/cve/CVE-2026-52860 self
https://bugzilla.redhat.com/show_bug.cgi?id=2487987 external
https://www.cve.org/CVERecord?id=CVE-2026-52860 external
https://nvd.nist.gov/vuln/detail/CVE-2026-52860 external
https://github.com/vim/vim/commit/c8c63673bc42532… external
https://github.com/vim/vim/releases/tag/v9.2.0597 external
https://github.com/vim/vim/security/advisories/GH… external
https://access.redhat.com/security/cve/CVE-2026-57451 self
https://bugzilla.redhat.com/show_bug.cgi?id=2492978 external
https://www.cve.org/CVERecord?id=CVE-2026-57451 external
https://nvd.nist.gov/vuln/detail/CVE-2026-57451 external
https://github.com/vim/vim/commit/b2338ca90643e2f… external
https://github.com/vim/vim/releases/tag/v9.2.0670 external
https://github.com/vim/vim/security/advisories/GH… external
https://access.redhat.com/security/cve/CVE-2026-57453 self
https://bugzilla.redhat.com/show_bug.cgi?id=2492967 external
https://www.cve.org/CVERecord?id=CVE-2026-57453 external
https://nvd.nist.gov/vuln/detail/CVE-2026-57453 external
https://github.com/vim/vim/commit/b2cc9be119d5121… external
https://github.com/vim/vim/releases/tag/v9.2.0678 external
https://github.com/vim/vim/security/advisories/GH… external
https://access.redhat.com/security/cve/CVE-2026-57454 self
https://bugzilla.redhat.com/show_bug.cgi?id=2492977 external
https://www.cve.org/CVERecord?id=CVE-2026-57454 external
https://nvd.nist.gov/vuln/detail/CVE-2026-57454 external
https://github.com/vim/vim/commit/b3faeecc976d303… external
https://github.com/vim/vim/releases/tag/v9.2.0679 external
https://github.com/vim/vim/security/advisories/GH… external
https://access.redhat.com/security/cve/CVE-2026-73073 self
https://bugzilla.redhat.com/show_bug.cgi?id=2517950 external
https://www.cve.org/CVERecord?id=CVE-2026-73073 external
https://nvd.nist.gov/vuln/detail/CVE-2026-73073 external
https://github.com/vim/vim/commit/2f628d8104958fa… external
https://github.com/vim/vim/releases/tag/v9.2.0845 external
https://github.com/vim/vim/security/advisories/GH… external
Acknowledgments
AISLE Research
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for Red Hat Hardened Images RPMs is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This update includes the following RPMs:\n\nvim:\n  * vim-X11-9.2.967-1.1.hum1 (aarch64, x86_64)\n  * vim-common-9.2.967-1.1.hum1 (aarch64, x86_64)\n  * vim-data-9.2.967-1.1.hum1 (noarch)\n  * vim-default-editor-9.2.967-1.1.hum1 (noarch)\n  * vim-enhanced-9.2.967-1.1.hum1 (aarch64, x86_64)\n  * vim-filesystem-9.2.967-1.1.hum1 (noarch)\n  * vim-minimal-9.2.967-1.1.hum1 (aarch64, x86_64)\n  * xxd-9.2.967-1.1.hum1 (aarch64, x86_64)\n  * vim-9.2.967-1.1.hum1.src (src)",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:57614",
        "url": "https://access.redhat.com/errata/RHSA-2026:57614"
      },
      {
        "category": "external",
        "summary": "https://images.redhat.com/",
        "url": "https://images.redhat.com/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-73073",
        "url": "https://access.redhat.com/security/cve/CVE-2026-73073"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-57451",
        "url": "https://access.redhat.com/security/cve/CVE-2026-57451"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-57453",
        "url": "https://access.redhat.com/security/cve/CVE-2026-57453"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-57454",
        "url": "https://access.redhat.com/security/cve/CVE-2026-57454"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-52860",
        "url": "https://access.redhat.com/security/cve/CVE-2026-52860"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-52858",
        "url": "https://access.redhat.com/security/cve/CVE-2026-52858"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-52859",
        "url": "https://access.redhat.com/security/cve/CVE-2026-52859"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-47167",
        "url": "https://access.redhat.com/security/cve/CVE-2026-47167"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-47162",
        "url": "https://access.redhat.com/security/cve/CVE-2026-47162"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-46483",
        "url": "https://access.redhat.com/security/cve/CVE-2026-46483"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-45130",
        "url": "https://access.redhat.com/security/cve/CVE-2026-45130"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-44656",
        "url": "https://access.redhat.com/security/cve/CVE-2026-44656"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-43961",
        "url": "https://access.redhat.com/security/cve/CVE-2026-43961"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-41411",
        "url": "https://access.redhat.com/security/cve/CVE-2026-41411"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-35177",
        "url": "https://access.redhat.com/security/cve/CVE-2026-35177"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-34982",
        "url": "https://access.redhat.com/security/cve/CVE-2026-34982"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39881",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39881"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_57614.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
    "tracking": {
      "current_release_date": "2026-09-21T17:23:09+00:00",
      "generator": {
        "date": "2026-09-21T17:23:09+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.0"
        }
      },
      "id": "RHSA-2026:57614",
      "initial_release_date": "2026-08-20T16:42:05+00:00",
      "revision_history": [
        {
          "date": "2026-08-20T16:42:05+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-21T11:37:22+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-21T17:23:09+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Hardened Images",
                "product": {
                  "name": "Red Hat Hardened Images",
                  "product_id": "Red Hat Hardened Images",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:hummingbird:1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Hardened Images"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vim-0:9.2.967-1.1.hum1@src",
                "product": {
                  "name": "vim-0:9.2.967-1.1.hum1@src",
                  "product_id": "vim-0:9.2.967-1.1.hum1@src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim@9.2.967-1.1.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vim-X11-0:9.2.967-1.1.hum1@aarch64",
                "product": {
                  "name": "vim-X11-0:9.2.967-1.1.hum1@aarch64",
                  "product_id": "vim-X11-0:9.2.967-1.1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-X11@9.2.967-1.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-common-0:9.2.967-1.1.hum1@aarch64",
                "product": {
                  "name": "vim-common-0:9.2.967-1.1.hum1@aarch64",
                  "product_id": "vim-common-0:9.2.967-1.1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-common@9.2.967-1.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
                "product": {
                  "name": "vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
                  "product_id": "vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-enhanced@9.2.967-1.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-minimal-0:9.2.967-1.1.hum1@aarch64",
                "product": {
                  "name": "vim-minimal-0:9.2.967-1.1.hum1@aarch64",
                  "product_id": "vim-minimal-0:9.2.967-1.1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-minimal@9.2.967-1.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xxd-0:9.2.967-1.1.hum1@aarch64",
                "product": {
                  "name": "xxd-0:9.2.967-1.1.hum1@aarch64",
                  "product_id": "xxd-0:9.2.967-1.1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xxd@9.2.967-1.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vim-X11-0:9.2.967-1.1.hum1@x86_64",
                "product": {
                  "name": "vim-X11-0:9.2.967-1.1.hum1@x86_64",
                  "product_id": "vim-X11-0:9.2.967-1.1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-X11@9.2.967-1.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-common-0:9.2.967-1.1.hum1@x86_64",
                "product": {
                  "name": "vim-common-0:9.2.967-1.1.hum1@x86_64",
                  "product_id": "vim-common-0:9.2.967-1.1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-common@9.2.967-1.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
                "product": {
                  "name": "vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
                  "product_id": "vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-enhanced@9.2.967-1.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-minimal-0:9.2.967-1.1.hum1@x86_64",
                "product": {
                  "name": "vim-minimal-0:9.2.967-1.1.hum1@x86_64",
                  "product_id": "vim-minimal-0:9.2.967-1.1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-minimal@9.2.967-1.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xxd-0:9.2.967-1.1.hum1@x86_64",
                "product": {
                  "name": "xxd-0:9.2.967-1.1.hum1@x86_64",
                  "product_id": "xxd-0:9.2.967-1.1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xxd@9.2.967-1.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                "product": {
                  "name": "vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_id": "vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-data@9.2.967-1.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                "product": {
                  "name": "vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_id": "vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-data@9.2.967-1.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                "product": {
                  "name": "vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_id": "vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-default-editor@9.2.967-1.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                "product": {
                  "name": "vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_id": "vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-default-editor@9.2.967-1.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                "product": {
                  "name": "vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_id": "vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-filesystem@9.2.967-1.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                "product": {
                  "name": "vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_id": "vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-filesystem@9.2.967-1.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-0:9.2.967-1.1.hum1@src as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src"
        },
        "product_reference": "vim-0:9.2.967-1.1.hum1@src",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-X11-0:9.2.967-1.1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64"
        },
        "product_reference": "vim-X11-0:9.2.967-1.1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-X11-0:9.2.967-1.1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64"
        },
        "product_reference": "vim-X11-0:9.2.967-1.1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-common-0:9.2.967-1.1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64"
        },
        "product_reference": "vim-common-0:9.2.967-1.1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-common-0:9.2.967-1.1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64"
        },
        "product_reference": "vim-common-0:9.2.967-1.1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms"
        },
        "product_reference": "vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms"
        },
        "product_reference": "vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms"
        },
        "product_reference": "vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms"
        },
        "product_reference": "vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-enhanced-0:9.2.967-1.1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64"
        },
        "product_reference": "vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-enhanced-0:9.2.967-1.1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64"
        },
        "product_reference": "vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms"
        },
        "product_reference": "vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms"
        },
        "product_reference": "vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-minimal-0:9.2.967-1.1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64"
        },
        "product_reference": "vim-minimal-0:9.2.967-1.1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-minimal-0:9.2.967-1.1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64"
        },
        "product_reference": "vim-minimal-0:9.2.967-1.1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xxd-0:9.2.967-1.1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64"
        },
        "product_reference": "xxd-0:9.2.967-1.1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xxd-0:9.2.967-1.1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
        },
        "product_reference": "xxd-0:9.2.967-1.1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-34982",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "discovery_date": "2026-04-06T16:02:10.004743+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2455400"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Vim. A modeline is used to set specific editor options directly from a text file. However, the `complete`, `guitabtooltip`, `printheader` options and the `mapset` function lack proper security checks, allowing an attacker to bypass restrictions and cause arbitrary OS command execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vim: arbitrary command execution via modeline sandbox bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this vulnerability, an attacker needs to convince a user to open a specially crafted file. The arbitrary OS command execution is restricted to the privileges of the user running Vim, limiting the potential of a full system compromise.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
          "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-34982"
        },
        {
          "category": "external",
          "summary": "RHBZ#2455400",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455400"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34982",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-34982"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34982",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34982"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2026/04/01/1",
          "url": "http://www.openwall.com/lists/oss-security/2026/04/01/1"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/commit/75661a66a1db1e1f3f1245c615",
          "url": "https://github.com/vim/vim/commit/75661a66a1db1e1f3f1245c615"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/releases/tag/v9.2.0276",
          "url": "https://github.com/vim/vim/releases/tag/v9.2.0276"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/security/advisories/GHSA-8h6p-m6gr-mpw9",
          "url": "https://github.com/vim/vim/security/advisories/GHSA-8h6p-m6gr-mpw9"
        }
      ],
      "release_date": "2026-04-06T15:16:48.809000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T16:42:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57614"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, disable the modeline support by adding the following command to the Vim configuration file:\n\n~~~\nset nomodeline\n~~~",
          "product_ids": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "vim: arbitrary command execution via modeline sandbox bypass"
    },
    {
      "cve": "CVE-2026-35177",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2026-04-06T19:01:00.182513+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2455542"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Vim\u0027s zip.vim plugin. A local user could be tricked into opening a specially crafted zip archive, which would allow a path traversal bypass. This vulnerability enables an attacker to overwrite arbitrary files on the system, potentially leading to data integrity issues or further system compromise.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There\u0027s a flaw in `zip.vim` plugin in Vim, allowing a local attacker to overwrite arbitrary files. A user must be tricked into opening a specially crafted zip archive for exploitation, potentially compromising data integrity or the system. When successfully exploited this vulnerability enables the attacker to overwrite arbitrary files or inject code in sensitive system\u0027s location, the impact of the exploitation depends on the privileges which the `vim` process is being executed. Sensitive or privileges files are only susceptible to be overwritten only if the `vim` process is being executed by a high privileged user.\n\nRed Hat Product Security team has rated this vulnerability as having a impact of MODERATE, this decision was made by the fact the user needs to be tricked to open a maliciously crafted file in order to a successful attack to be performed. Additionally the impact will be limited to files which the user running the `vim` process has write permissions.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
          "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-35177"
        },
        {
          "category": "external",
          "summary": "RHBZ#2455542",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455542"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-35177",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-35177"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35177",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35177"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/security/advisories/GHSA-jc86-w7vm-8p24",
          "url": "https://github.com/vim/vim/security/advisories/GHSA-jc86-w7vm-8p24"
        }
      ],
      "release_date": "2026-04-06T17:54:42.779000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T16:42:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57614"
        },
        {
          "category": "workaround",
          "details": "Avoid opening untrusted zip archives with Vim. This operational control prevents the necessary user interaction required to trigger the path traversal vulnerability in the `zip.vim` plugin.",
          "product_ids": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 4.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass"
    },
    {
      "cve": "CVE-2026-39881",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "discovery_date": "2026-04-08T21:01:46.786785+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2456722"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Vim. A command injection vulnerability in Vim\u0027s NetBeans interface allows a malicious NetBeans server to execute arbitrary Ex commands when Vim connects to it. This occurs due to unsanitized strings in the defineAnnoType and specialKeys protocol messages, leading to arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vim: Vim: Arbitrary code execution via command injection in NetBeans interface",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A command injection flaw in Vim\u0027s NetBeans interface allows a malicious NetBeans server to execute arbitrary commands when Vim connects to it. This happens because of Vim lacking the sanitization of strings in the protocol command messages, an attacker may leverage that to send maliciously crafted messages to the client that send a `|` character in certain command fields making Vim further interpret as an Ex command interpolation and executing arbitrary code in the victim\u0027s machine.\n\nRed Hat Product Security has rated this vulnerability as having the impact of Moderate, this happens because for an attack be considered successful the victim needs to deliberately connect to an untrusted malicious Netbeans server or the attacker needs to intercept the control messages and properly change it (MiTM) with the malicious payload. Additionally the code executed will be executed with the same privileges as the user running the Vim process, meaning the impact will be restricted by the same privilege level as the edit process has.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
          "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39881"
        },
        {
          "category": "external",
          "summary": "RHBZ#2456722",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456722"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39881",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39881"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39881",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39881"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/commit/7ab76a86048ed492374ac6b19",
          "url": "https://github.com/vim/vim/commit/7ab76a86048ed492374ac6b19"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/releases/tag/v9.2.0316",
          "url": "https://github.com/vim/vim/releases/tag/v9.2.0316"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/security/advisories/GHSA-mr87-rhgv-7pw6",
          "url": "https://github.com/vim/vim/security/advisories/GHSA-mr87-rhgv-7pw6"
        }
      ],
      "release_date": "2026-04-08T20:18:19.774000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T16:42:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57614"
        },
        {
          "category": "workaround",
          "details": "Users should refrain to connect to untrusted netbeans server.",
          "product_ids": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.0,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "vim: Vim: Arbitrary code execution via command injection in NetBeans interface"
    },
    {
      "cve": "CVE-2026-41411",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "discovery_date": "2026-04-24T18:01:49.275019+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2461614"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Vim, an open-source command-line text editor. This command injection vulnerability occurs during tag file processing. A local user could craft a malicious tags file containing backtick syntax in the filename field. When Vim resolves a tag from this file, it executes the embedded command via the system shell, leading to arbitrary code execution with the privileges of the running user.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vim: Command injection allows arbitrary code execution via malicious tag files",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
          "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41411"
        },
        {
          "category": "external",
          "summary": "RHBZ#2461614",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461614"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41411",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41411"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41411",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41411"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/commit/c78194e41d5a0b05b0ddf383b6679b1503f977fb",
          "url": "https://github.com/vim/vim/commit/c78194e41d5a0b05b0ddf383b6679b1503f977fb"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/releases/tag/v9.2.0357",
          "url": "https://github.com/vim/vim/releases/tag/v9.2.0357"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/security/advisories/GHSA-cwgx-gcj7-6qh8",
          "url": "https://github.com/vim/vim/security/advisories/GHSA-cwgx-gcj7-6qh8"
        }
      ],
      "release_date": "2026-04-24T16:51:39.657000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T16:42:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57614"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue involves exercising caution when opening or processing tag files from untrusted sources. Users should avoid loading tag files from unknown or suspicious origins to prevent the execution of arbitrary commands.",
          "product_ids": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "vim: Command injection allows arbitrary code execution via malicious tag files"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "AISLE Research"
          ]
        }
      ],
      "cve": "CVE-2026-43961",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
      },
      "discovery_date": "2026-04-21T23:21:48+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2460434"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Vim\u0027s netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the quoted context during mark/unmark operations, allowing arbitrary Vimscript execution. This can be leveraged to run shell commands with the privileges of the user running Vim.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vim: Vimscript injection via unescaped filename in netrw s:NetrwMarkFile() filter() expression allows arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: This Vimscript injection flaw in netrw allows arbitrary code execution with user privileges. Exploitation requires a local attacker to place a specially crafted filename in a directory and a victim to browse that directory with netrw and interact with the malicious entry. This directly impacts the confidentiality, integrity, and availability of the user\u0027s data and environment.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
          "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-43961"
        },
        {
          "category": "external",
          "summary": "RHBZ#2460434",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460434"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-43961",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-43961"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43961",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43961"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/security/advisories/GHSA-66hr-7p6x-x5j3",
          "url": "https://github.com/vim/vim/security/advisories/GHSA-66hr-7p6x-x5j3"
        }
      ],
      "release_date": "2026-08-19T13:26:06.830000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T16:42:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57614"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, users should avoid browsing untrusted directories or interacting with files from untrusted sources using Vim\u0027s netrw plugin. Exercise caution when opening directories that may contain maliciously crafted filenames.",
          "product_ids": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "vim: Vimscript injection via unescaped filename in netrw s:NetrwMarkFile() filter() expression allows arbitrary code execution"
    },
    {
      "cve": "CVE-2026-44656",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "discovery_date": "2026-05-09T00:01:23.110689+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2468420"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Vim, an open-source command-line text editor. An attacker who controls the contents of a file can exploit an OS command injection vulnerability in Vim\u0027s `:find` command-line completion. This occurs when the `path` option, which can be set from a modeline, contains backtick-enclosed shell commands. These commands are then executed when a user opens the malicious file and triggers `:find` completion, leading to arbitrary command execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vim: Vim: Arbitrary command execution via :find command-line completion",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
          "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44656"
        },
        {
          "category": "external",
          "summary": "RHBZ#2468420",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2468420"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44656",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44656"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44656",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44656"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/commit/190cb3c2b9c769a3972bcfd991a7b5b6cb771ef0",
          "url": "https://github.com/vim/vim/commit/190cb3c2b9c769a3972bcfd991a7b5b6cb771ef0"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/releases/tag/v9.2.0435",
          "url": "https://github.com/vim/vim/releases/tag/v9.2.0435"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/security/advisories/GHSA-hwg5-3cxw-wvvg",
          "url": "https://github.com/vim/vim/security/advisories/GHSA-hwg5-3cxw-wvvg"
        }
      ],
      "release_date": "2026-05-08T22:40:49.673000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T16:42:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57614"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "vim: Vim: Arbitrary command execution via :find command-line completion"
    },
    {
      "cve": "CVE-2026-45130",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-05-09T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2468422"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Vim, an open-source command-line text editor. A heap buffer overflow exists in the `read_compound()` function when processing a specially crafted spell file (.spl) with UTF-8 encoding active. A remote attacker could exploit this by convincing a user to open a text file containing a malicious modeline, which could then load a planted malicious spell file. This could lead to a heap overflow, potentially resulting in an application-level denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vim: Vim: Heap buffer overflow allows arbitrary code execution or denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Moderate flaw in Vim arises from a heap buffer overflow when processing specially crafted spell files with UTF-8 encoding. Exploitation requires user interaction, specifically opening a text file containing a malicious modeline that points to a planted, malicious spell file. This limits the attack vector to scenarios where an attacker can control both the text file and the spell file on the user\u0027s system, leading primarily to application-level denial of service.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
          "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-45130"
        },
        {
          "category": "external",
          "summary": "RHBZ#2468422",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2468422"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-45130",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-45130"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45130",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45130"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/commit/92993329178cb1f72d700fff45ca86e1c2d369f8",
          "url": "https://github.com/vim/vim/commit/92993329178cb1f72d700fff45ca86e1c2d369f8"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/releases/tag/v9.2.0450",
          "url": "https://github.com/vim/vim/releases/tag/v9.2.0450"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/security/advisories/GHSA-q4jv-r9gj-6cwv",
          "url": "https://github.com/vim/vim/security/advisories/GHSA-q4jv-r9gj-6cwv"
        }
      ],
      "release_date": "2026-05-08T22:42:35.097000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T16:42:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57614"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "vim: Vim: Heap buffer overflow allows arbitrary code execution or denial of service"
    },
    {
      "cve": "CVE-2026-46483",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "discovery_date": "2026-05-15T16:00:58.827425+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2477915"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Vim. When decompressing .tgz archives, the Vimuntar function builds shell commands using shellescape() without the {special} flag. This allows a specially crafted archive filename to trigger Vim cmdline-special expansion and execute arbitrary commands in the context of the current user.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vim: command injection when decompressing .tgz archives",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to convince a user to decompress a .tgz archive with a specially crafted filename. Additionally, possible arbitrary command execution is restricted to the context of the user running Vim. These conditions limit the exposure of this vulnerability and the potential of a full system compromise. Due to these reasons, this flaw has been rated with a moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
          "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-46483"
        },
        {
          "category": "external",
          "summary": "RHBZ#2477915",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477915"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-46483",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-46483"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46483",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46483"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/commit/3fb5e58fbc63d86a3e65f1a141b0d67af2aa38a1",
          "url": "https://github.com/vim/vim/commit/3fb5e58fbc63d86a3e65f1a141b0d67af2aa38a1"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/releases/tag/v9.2.0479",
          "url": "https://github.com/vim/vim/releases/tag/v9.2.0479"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/security/advisories/GHSA-2fpv-9ff7-xg5w",
          "url": "https://github.com/vim/vim/security/advisories/GHSA-2fpv-9ff7-xg5w"
        }
      ],
      "release_date": "2026-05-15T14:57:31.872000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T16:42:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57614"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, do not decompress untrusted .tgz archives with the Vimuntar command. Use \u0027tar -x -z -f\u0027 directly, instead.",
          "product_ids": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "vim: command injection when decompressing .tgz archives"
    },
    {
      "cve": "CVE-2026-47162",
      "cwe": {
        "id": "CWE-140",
        "name": "Improper Neutralization of Delimiters"
      },
      "discovery_date": "2026-06-11T19:00:56.050612+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2487964"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Vim, an open-source text editor. This vulnerability, located in the netrw plugin, involves a code injection issue when the editor processes directory paths. A malicious directory name, if crafted by an attacker, could bypass security measures and allow for the execution of unauthorized commands. This could lead to arbitrary code execution on the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vim: Vim: Arbitrary Code Execution via crafted directory names",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
          "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-47162"
        },
        {
          "category": "external",
          "summary": "RHBZ#2487964",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487964"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-47162",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-47162"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47162",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47162"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/commit/f08ab2f4d7d2947c8dd6c179ae08ee6146a2694b",
          "url": "https://github.com/vim/vim/commit/f08ab2f4d7d2947c8dd6c179ae08ee6146a2694b"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/releases/tag/v9.2.0495",
          "url": "https://github.com/vim/vim/releases/tag/v9.2.0495"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/security/advisories/GHSA-crm5-rh6j-2c7c",
          "url": "https://github.com/vim/vim/security/advisories/GHSA-crm5-rh6j-2c7c"
        }
      ],
      "release_date": "2026-06-11T18:32:14.471000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T16:42:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57614"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "vim: Vim: Arbitrary Code Execution via crafted directory names"
    },
    {
      "cve": "CVE-2026-47167",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
      },
      "discovery_date": "2026-06-11T19:02:45.999423+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2487996"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Vim, a command-line text editor. This vulnerability, identified as a code injection, affects the cucumber filetype plugin when Vim is configured with Ruby support. An attacker could exploit this by creating a malicious repository containing specially crafted step-definition patterns. If a user opens this repository and triggers a specific function, the crafted patterns are unsafely processed, potentially allowing the attacker to execute unauthorized commands on the user\u0027s system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vim: Vim: Arbitrary code execution via crafted step-definition patterns",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important vulnerability in Vim\u0027s cucumber filetype plugin, when configured with Ruby support, allows for arbitrary code execution. An attacker could exploit this by convincing a user to open a specially crafted repository and trigger a specific step-jump mapping, leading to local command execution. This risk is contingent on user interaction with untrusted content and the presence of the Ruby-enabled cucumber plugin.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
          "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-47167"
        },
        {
          "category": "external",
          "summary": "RHBZ#2487996",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487996"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-47167",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-47167"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47167",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47167"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/commit/a65a52d684bc58535ad28a4ae824d22e76399934",
          "url": "https://github.com/vim/vim/commit/a65a52d684bc58535ad28a4ae824d22e76399934"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/releases/tag/v9.2.0496",
          "url": "https://github.com/vim/vim/releases/tag/v9.2.0496"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/security/advisories/GHSA-4473-94jm-w5x9",
          "url": "https://github.com/vim/vim/security/advisories/GHSA-4473-94jm-w5x9"
        }
      ],
      "release_date": "2026-06-11T18:31:44.286000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T16:42:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57614"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, users should exercise caution when opening untrusted files or repositories with Vim, particularly those that might trigger the `cucumber` filetype plugin. Avoiding interaction with untrusted content can prevent the execution of malicious step-definition patterns.",
          "product_ids": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "vim: Vim: Arbitrary code execution via crafted step-definition patterns"
    },
    {
      "cve": "CVE-2026-52858",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
      },
      "discovery_date": "2026-06-11T19:01:57.042099+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2487981"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Vim, a widely used command-line text editor. This vulnerability allows a local attacker to execute arbitrary code on the system. By opening a specially crafted Python file and then triggering the omni-completion feature, the attacker can cause Vim to run malicious code from a sibling Python package. This could lead to a complete compromise of the user\u0027s system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vim: Vim: Arbitrary code execution via Python omni-completion",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important vulnerability in Vim that allows a local attacker to achieve arbitrary code execution. The flaw occurs when a user opens a specially crafted Python file and invokes omni-completion, leading to the execution of malicious code from a co-located Python package. This risk is present in Red Hat Enterprise Linux and other products where Vim is deployed with Python omni-completion enabled, potentially compromising the editing user\u0027s system.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
          "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-52858"
        },
        {
          "category": "external",
          "summary": "RHBZ#2487981",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487981"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-52858",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-52858"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-52858",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52858"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/commit/4b850457e12e1a678dd209f2868154f7553cbf8d",
          "url": "https://github.com/vim/vim/commit/4b850457e12e1a678dd209f2868154f7553cbf8d"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/releases/tag/v9.2.0561",
          "url": "https://github.com/vim/vim/releases/tag/v9.2.0561"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/security/advisories/GHSA-52mc-rq6p-rc7c",
          "url": "https://github.com/vim/vim/security/advisories/GHSA-52mc-rq6p-rc7c"
        }
      ],
      "release_date": "2026-06-11T18:32:32.722000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T16:42:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57614"
        },
        {
          "category": "workaround",
          "details": "Users can mitigate this vulnerability by disabling Python omni-completion in Vim if it is not essential for their workflow. This prevents the execution of untrusted Python code when opening hostile files. To disable this feature, ensure that the `omnifunc` option in your Vim configuration (e.g., `~/.vimrc`) is not set to `pythoncomplete#Complete` or `python3complete#Complete`. Alternatively, users should avoid invoking omni-completion (`Ctrl-X Ctrl-O`) on Python files from untrusted sources. Disabling Python omni-completion may affect Python development functionality within Vim.",
          "product_ids": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "vim: Vim: Arbitrary code execution via Python omni-completion"
    },
    {
      "cve": "CVE-2026-52859",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-06-11T19:02:24.309768+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2487989"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Vim, an open-source command-line text editor. This vulnerability allows a program displaying output in a Vim terminal window to trigger an out-of-bounds write by sending a specific byte sequence. This can lead to a crash of the Vim application, resulting in a Denial of Service (DoS) for the user.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vim: Vim: Denial of Service via out-of-bounds write in terminal handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Moderate flaw in Vim allows a local attacker to cause a denial of service. By displaying specially crafted output within a Vim `:terminal` window, an attacker can trigger an out-of-bounds write, leading to the application crashing. This primarily impacts users who interact with untrusted content or execute untrusted programs within Vim\u0027s terminal emulator.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
          "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-52859"
        },
        {
          "category": "external",
          "summary": "RHBZ#2487989",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487989"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-52859",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-52859"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-52859",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52859"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/commit/63680c6d3d52477817b49cd1a66e7aabe8a7aa19",
          "url": "https://github.com/vim/vim/commit/63680c6d3d52477817b49cd1a66e7aabe8a7aa19"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/releases/tag/v9.2.0565",
          "url": "https://github.com/vim/vim/releases/tag/v9.2.0565"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/security/advisories/GHSA-47gw-8gc3-mgcm",
          "url": "https://github.com/vim/vim/security/advisories/GHSA-47gw-8gc3-mgcm"
        }
      ],
      "release_date": "2026-06-11T18:33:09.886000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T16:42:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57614"
        },
        {
          "category": "workaround",
          "details": "Users should exercise caution when opening untrusted files or executing untrusted programs within vim\u0027s `:terminal` window. Avoiding interaction with untrusted content in this context can prevent the exploitation of this vulnerability, which leads to a denial of service.",
          "product_ids": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.0,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "vim: Vim: Denial of Service via out-of-bounds write in terminal handling"
    },
    {
      "cve": "CVE-2026-52860",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
      },
      "discovery_date": "2026-06-11T19:02:15.975550+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2487987"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Vim, an open-source command-line text editor. The Python omni-completion feature executes reconstructed function and class definitions from the current buffer. A remote attacker can exploit this by crafting a hostile buffer, leading to the execution of attacker-controlled Python expressions during omni-completion. This vulnerability can result in arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vim: Vim: Arbitrary code execution through Python omni-completion.",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
          "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-52860"
        },
        {
          "category": "external",
          "summary": "RHBZ#2487987",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487987"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-52860",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-52860"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-52860",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-52860"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/commit/c8c63673bc4253212820626aeeb75999d9a539d2",
          "url": "https://github.com/vim/vim/commit/c8c63673bc4253212820626aeeb75999d9a539d2"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/releases/tag/v9.2.0597",
          "url": "https://github.com/vim/vim/releases/tag/v9.2.0597"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/security/advisories/GHSA-52mc-rq6p-rc7c",
          "url": "https://github.com/vim/vim/security/advisories/GHSA-52mc-rq6p-rc7c"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/security/advisories/GHSA-65p9-mwwx-7468",
          "url": "https://github.com/vim/vim/security/advisories/GHSA-65p9-mwwx-7468"
        }
      ],
      "release_date": "2026-06-11T18:33:45.838000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T16:42:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57614"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.0,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "vim: Vim: Arbitrary code execution through Python omni-completion."
    },
    {
      "cve": "CVE-2026-57451",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-06-25T16:02:10.563068+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2492978"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw in Vim allows an attacker to cause a Denial of Service (DoS) via an application crash. If a user opens a maliciously crafted undo file, an out-of-bounds read is triggered in the get_text_props() function due to missing length validation on property counts.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vim: Vim: Denial of service via crafted undo file",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Exploitation requires specific user interaction; the vulnerability only triggers when a local user is tricked into opening a specially crafted undo file in Vim. This limits the attack surface to scenarios where untrusted files are intentionally processed",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
          "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-57451"
        },
        {
          "category": "external",
          "summary": "RHBZ#2492978",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492978"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-57451",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-57451"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-57451",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-57451"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/commit/b2338ca90643e2f01ecb6547c1172716aaec4f79",
          "url": "https://github.com/vim/vim/commit/b2338ca90643e2f01ecb6547c1172716aaec4f79"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/releases/tag/v9.2.0670",
          "url": "https://github.com/vim/vim/releases/tag/v9.2.0670"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/security/advisories/GHSA-f36c-2qcp-7gpw",
          "url": "https://github.com/vim/vim/security/advisories/GHSA-f36c-2qcp-7gpw"
        }
      ],
      "release_date": "2026-06-25T15:28:50.474000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T16:42:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57614"
        },
        {
          "category": "workaround",
          "details": "Users are advised to avoid opening or processing undo files from untrusted or unknown sources. If your team compiles Vim from source, ensure standard compiler security flags (like -D_FORTIFY_SOURCE=2 or 3) are enabled. This provides a safety net by detecting out-of-bounds reads and safely terminating the application before exploitation can occur.",
          "product_ids": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "vim: Vim: Denial of service via crafted undo file"
    },
    {
      "cve": "CVE-2026-57453",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "discovery_date": "2026-06-25T16:01:12.405328+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2492967"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A security vulnerability exists in the Vim text editor. If a user opens a specially crafted ZIP file in Vim, it can trick the application into running hidden, harmful commands on their computer. This specific issue is only triggered if Vim relies on PowerShell to open the ZIP file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vim: Vim: Arbitrary code execution via crafted zip archive entry names",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability was introduced in Vim version 9.1.1784. Because Red Hat products do not ship this version, they are unaffected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
          "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-57453"
        },
        {
          "category": "external",
          "summary": "RHBZ#2492967",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492967"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-57453",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-57453"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-57453",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-57453"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/commit/b2cc9be119d51212bf0d3f2a99",
          "url": "https://github.com/vim/vim/commit/b2cc9be119d51212bf0d3f2a99"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/releases/tag/v9.2.0678",
          "url": "https://github.com/vim/vim/releases/tag/v9.2.0678"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/security/advisories/GHSA-x5fg-h5w9-9frf",
          "url": "https://github.com/vim/vim/security/advisories/GHSA-x5fg-h5w9-9frf"
        }
      ],
      "release_date": "2026-06-25T15:26:48.854000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T16:42:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57614"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 5.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "vim: Vim: Arbitrary code execution via crafted zip archive entry names"
    },
    {
      "cve": "CVE-2026-57454",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-06-25T16:02:05.053181+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2492977"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Vim, an open source command-line text editor. A local attacker could exploit this vulnerability by providing a specially crafted undo or swap file. When Vim processes this file, an out-of-bounds read occurs, which can lead to the disclosure of sensitive information from memory or cause the application to crash, resulting in a denial of service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vim: Vim: Out-of-bounds Read with Text Properties",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability was introduced in Vim version 9.2.0320. Because Red Hat products do not ship this version, they are unaffected.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
          "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-57454"
        },
        {
          "category": "external",
          "summary": "RHBZ#2492977",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492977"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-57454",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-57454"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-57454",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-57454"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/commit/b3faeecc976d3031d7c0675623516ec60c30f949",
          "url": "https://github.com/vim/vim/commit/b3faeecc976d3031d7c0675623516ec60c30f949"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/releases/tag/v9.2.0679",
          "url": "https://github.com/vim/vim/releases/tag/v9.2.0679"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/security/advisories/GHSA-ww8h-47xp-hp4w",
          "url": "https://github.com/vim/vim/security/advisories/GHSA-ww8h-47xp-hp4w"
        }
      ],
      "release_date": "2026-06-25T15:24:54.196000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T16:42:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57614"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "vim: Vim: Out-of-bounds Read with Text Properties"
    },
    {
      "cve": "CVE-2026-73073",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "discovery_date": "2026-08-18T15:32:31.052076+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2517950"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Vim, an open-source command-line text editor. An attacker could craft a malicious tags file that, when processed by Vim\u0027s C omni-completion feature, leads to insufficient escaping of input. This vulnerability allows for the execution of arbitrary Ex commands and, subsequently, operating-system commands on the user\u0027s system. Successful exploitation requires a user to open a C file from an attacker-controlled tree and invoke C omni-completion on a member access whose type is resolved from the malicious tags file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important vulnerability in Vim where a local attacker could achieve arbitrary command execution. By crafting a malicious tags file and enticing a user to open a C file from an untrusted source and invoke C omni-completion, the attacker could execute arbitrary commands in the context of the user running Vim. This is considered Important due to the potential for full user-level compromise, despite requiring specific user interaction and a crafted file.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
          "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
          "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
          "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-73073"
        },
        {
          "category": "external",
          "summary": "RHBZ#2517950",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517950"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-73073",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-73073"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73073",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73073"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/commit/2f628d8104958fa7421664f792ca6d4f7a39a10f",
          "url": "https://github.com/vim/vim/commit/2f628d8104958fa7421664f792ca6d4f7a39a10f"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/releases/tag/v9.2.0845",
          "url": "https://github.com/vim/vim/releases/tag/v9.2.0845"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/security/advisories/GHSA-cx73-phcg-3j5g",
          "url": "https://github.com/vim/vim/security/advisories/GHSA-cx73-phcg-3j5g"
        }
      ],
      "release_date": "2026-08-18T15:25:26.817000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-20T16:42:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:57614"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, users should avoid opening C source files from untrusted sources, especially when accompanied by untrusted tags files. Exercise caution when invoking C omni-completion (CTRL-X CTRL-O) on files from unknown or suspicious origins.",
          "product_ids": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:vim-0:9.2.967-1.1.hum1@src",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-X11-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-common-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-data-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-default-editor-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-enhanced-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:vim-filesystem-0:9.2.967-1.1.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:vim-minimal-0:9.2.967-1.1.hum1@x86_64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@aarch64",
            "Red Hat Hardened Images:xxd-0:9.2.967-1.1.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.