🛡️ MGASA-2026-0240 — vim

⚪ Unknown ✅ No Known Exploit OSV

N/A

CVSS Score

0 Low4 Medium7 High9 Critical10

Description

Updated vim packages fix security vulnerabilities

The updated packages fix security vulnerabilities:

Arbitrary Code Execution via Python Omni-Completion in Vim < 9.2.0561.

(CVE-2026-52858)

Out-of-bounds Read in Terminal Screen Snapshot in Vim < 9.2.0565.

(CVE-2026-52859)

Arbitrary Code Execution via Python Omni-Completion in Vim < 9.2.0597.

(CVE-2026-52860)

Out-of-bounds Write in Spell File Word Count in Vim < 9.2.0653.

(CVE-2026-55693)

Out-of-bounds Write in Spell File Prefix Dump in Vim < 9.2.0662.

(CVE-2026-55892)

Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted

filename affects Vim < 9.2.0663. (CVE-2026-55895)

Out-of-bounds Read in Text Property Count in Vim < 9.2.0670.

(CVE-2026-57451)

Out-of-bounds Read with libsodium-encrypted Files in Vim < 9.2.0671.

(CVE-2026-57452)

PowerShell Command Injection in zip.vim via Crafted Archive Entry Names

in Vim > 9.1.1783 && Vim < 9.2.0678. (CVE-2026-57453)

Out-of-bounds Read with Text Properties in Vim >= 9.2.0320 && Vim <

9.2.0679. (CVE-2026-57454)

Out-of-bounds Write in SOFO Soundfolding in Vim < 9.2.0698.

(CVE-2026-57455)

Arbitrary Code Execution via Python Omni-Completion Docstrings in Vim <

9.2.0699. (CVE-2026-57456)

Affected software

MGASA-2026-0240 is recorded against 1 package.

vim (fixed in 9.2.782-1.mga9)

Timeline and source

Published on 10 July 2026. No public exploit is currently recorded for this entry. Record sourced from OSV.

References

advisories.mageia.org (Advisory)
bugs.mageia.org (Report)
www.openwall.com (Web)
github.com (Advisory)
www.openwall.com (Web)
github.com (Advisory)
www.openwall.com (Web)
github.com (Advisory)
www.openwall.com (Web)
github.com (Advisory)
www.openwall.com (Web)
github.com (Advisory)
www.openwall.com (Web)
github.com (Advisory)
www.openwall.com (Web)

Details

Severity Unknown

CVSS Score N/A

CVSS Vector N/A

CWE N/A

Public Exploit ✅ No

Source OSV

Published 2026-07-10

Updated 2026-08-12

Modified 2026-07-10

Fix URL N/A

Affected Packages

Software	From version	Fixed in
vim	—	9.2.782-1.mga9

References

ADVISORY https://advisories.mageia.org/MGASA-2026-0240.html

REPORT https://bugs.mageia.org/show_bug.cgi?id=35580

WEB https://www.openwall.com/lists/oss-security/2026/05/22/13

ADVISORY https://github.com/vim/vim/security/advisories/GHSA-3h95-3962-mmvf

WEB https://www.openwall.com/lists/oss-security/2026/05/29/5

ADVISORY https://github.com/vim/vim/security/advisories/GHSA-52mc-rq6p-rc7c

WEB https://www.openwall.com/lists/oss-security/2026/05/30/4

ADVISORY https://github.com/vim/vim/security/advisories/GHSA-47gw-8gc3-mgcm

WEB https://www.openwall.com/lists/oss-security/2026/06/04/14

ADVISORY https://github.com/vim/vim/security/advisories/GHSA-65p9-mwwx-7468

WEB https://www.openwall.com/lists/oss-security/2026/06/15/8

ADVISORY https://github.com/vim/vim/security/advisories/GHSA-wgh4-64f7-q3jq

WEB https://www.openwall.com/lists/oss-security/2026/06/16/12

ADVISORY https://github.com/vim/vim/security/advisories/GHSA-qm9w-fmpj-879h

WEB https://www.openwall.com/lists/oss-security/2026/06/16/13

ADVISORY https://github.com/vim/vim/security/advisories/GHSA-vhh8-v6wx-hjjh

WEB https://www.openwall.com/lists/oss-security/2026/06/17/10

ADVISORY https://github.com/vim/vim/security/advisories/GHSA-f36c-2qcp-7gpw

WEB https://www.openwall.com/lists/oss-security/2026/06/18/7

ADVISORY https://github.com/vim/vim/security/advisories/GHSA-c4j9-wr9j-4486

WEB https://www.openwall.com/lists/oss-security/2026/06/20/2

ADVISORY https://github.com/vim/vim/security/advisories/GHSA-x5fg-h5w9-9frf

WEB https://www.openwall.com/lists/oss-security/2026/06/20/3

ADVISORY https://github.com/vim/vim/security/advisories/GHSA-ww8h-47xp-hp4w

WEB https://www.openwall.com/lists/oss-security/2026/06/21/1

ADVISORY https://github.com/vim/vim/security/advisories/GHSA-q8mh-6qm3-25g4

WEB https://www.openwall.com/lists/oss-security/2026/06/21/2

ADVISORY https://github.com/vim/vim/security/advisories/GHSA-ppj8-wqjf-6fp3

WEB https://www.openwall.com/lists/oss-security/2026/06/24/9

ADVISORY https://github.com/vim/vim/security/advisories/GHSA-m3hf-xcm3-xhm2

WEB https://www.openwall.com/lists/oss-security/2026/06/27/6

ADVISORY https://github.com/vim/vim/security/advisories/GHSA-mf92-v4xw-j45x

WEB https://www.openwall.com/lists/oss-security/2026/06/28/1

ADVISORY https://github.com/vim/vim/security/advisories/GHSA-fh26-8f79-wj97

🔗 NVD 🔗 Mitre

Similar Threats

More MGASA 2026 advisories

Browse all of MGASA 2026 in the advisory index.

Free Vulnerability Check

Is your site affected by MGASA-2026-0240?

BotEraser helps you identify potentially vulnerable plugins and themes by checking your installation against MGASA-2026-0240 and other known CVE records.

Scan My Site Free →

No credit card required · Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.