<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: vim</title><description>Every new CVE for vim.</description><link>https://agentprime.io/</link><item><title>CVE-2026-43961: Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution</title><link>https://agentprime.io/advisories/CVE-2026-43961/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-43961/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 19 Aug 2026 14:06:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-73073: Vim: Arbitrary Ex Command Execution in C Omni-Completion</title><link>https://agentprime.io/advisories/CVE-2026-73073/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73073/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 18 Aug 2026 15:25:26 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-73078: Vim: Arbitrary Code Execution via Netrw Menu Construction</title><link>https://agentprime.io/advisories/CVE-2026-73078/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73078/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 11 Aug 2026 15:41:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-73077: Vim: Arbitrary Code Execution via Shell Keyword Lookup</title><link>https://agentprime.io/advisories/CVE-2026-73077/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73077/</guid><description>CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 11 Aug 2026 15:39:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-73076: Vim: Arbitrary Command Execution via Malicious `.VimballRecord` Entry Replay in `vimball.vim`</title><link>https://agentprime.io/advisories/CVE-2026-73076/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73076/</guid><description>CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 11 Aug 2026 15:37:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-73075: Vim: Out-of-bounds Access in Popup Opacity Handling</title><link>https://agentprime.io/advisories/CVE-2026-73075/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73075/</guid><description>CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 11 Aug 2026 15:36:33 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-73074: Vim: Heap Buffer Overflow in Text Property Handling</title><link>https://agentprime.io/advisories/CVE-2026-73074/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73074/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 11 Aug 2026 15:35:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-73072: Vim: Heap Buffer Overflow when Loading a Spell File</title><link>https://agentprime.io/advisories/CVE-2026-73072/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73072/</guid><description>CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 11 Aug 2026 15:31:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-73071: Vim: Use-after-free in JSON Decoding</title><link>https://agentprime.io/advisories/CVE-2026-73071/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73071/</guid><description>CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 11 Aug 2026 15:29:30 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-73070: Vim: Stack Buffer Overflow in the Vim Socket Server</title><link>https://agentprime.io/advisories/CVE-2026-73070/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73070/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 11 Aug 2026 15:21:49 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-59856: Vim: Arbitrary Code Execution via PHP Omni-Completion</title><link>https://agentprime.io/advisories/CVE-2026-59856/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-59856/</guid><description>CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 09 Jul 2026 22:39:01 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-59858: Vim: Arbitrary Code Execution via C Omni-Completion</title><link>https://agentprime.io/advisories/CVE-2026-59858/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-59858/</guid><description>CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 09 Jul 2026 22:37:52 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-59857: Vim: Out-of-bounds Write in SAL Soundfolding</title><link>https://agentprime.io/advisories/CVE-2026-59857/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-59857/</guid><description>CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 09 Jul 2026 22:34:54 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-55693: Vim: Out-of-bounds Write in Spell File Word Count</title><link>https://agentprime.io/advisories/CVE-2026-55693/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-55693/</guid><description>CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 25 Jun 2026 15:34:33 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-55892: Vim: Out-of-bounds Write in Spell File Prefix Dump</title><link>https://agentprime.io/advisories/CVE-2026-55892/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-55892/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 25 Jun 2026 15:32:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-55895: Vim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filename</title><link>https://agentprime.io/advisories/CVE-2026-55895/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-55895/</guid><description>CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 25 Jun 2026 15:31:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-57451: Vim: Out-of-bounds Read in Text Property Count</title><link>https://agentprime.io/advisories/CVE-2026-57451/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-57451/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 25 Jun 2026 15:28:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-57452: Vim: Out-of-bounds Read with libsodium-encrypted Files</title><link>https://agentprime.io/advisories/CVE-2026-57452/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-57452/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 25 Jun 2026 15:27:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-57453: Vim: PowerShell Command Injection via Unescaped Filename in zip.vim Extraction</title><link>https://agentprime.io/advisories/CVE-2026-57453/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-57453/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 25 Jun 2026 15:26:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-57454: Vim: Out-of-bounds Read with Text Properties</title><link>https://agentprime.io/advisories/CVE-2026-57454/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-57454/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 25 Jun 2026 15:24:54 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-57455: Vim: Stack out-of-bounds write in `spell_soundfold_sofo()` via an over-length `soundfold()` argument</title><link>https://agentprime.io/advisories/CVE-2026-57455/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-57455/</guid><description>CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 25 Jun 2026 15:22:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-57456: Vim: Arbitrary Code Execution via Python Omni-Completion Docstrings</title><link>https://agentprime.io/advisories/CVE-2026-57456/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-57456/</guid><description>CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 25 Jun 2026 15:16:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-52860: Vim: Arbitrary Code Execution via Python Omni-Completion</title><link>https://agentprime.io/advisories/CVE-2026-52860/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-52860/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 11 Jun 2026 18:33:45 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-52859: Vim: Out-of-bounds Read in Terminal Screen Snapshot</title><link>https://agentprime.io/advisories/CVE-2026-52859/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-52859/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 11 Jun 2026 18:33:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-52858: Vim: Arbitrary Code Execution via Python Omni-Completion</title><link>https://agentprime.io/advisories/CVE-2026-52858/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-52858/</guid><description>CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 11 Jun 2026 18:32:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-47162: Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name</title><link>https://agentprime.io/advisories/CVE-2026-47162/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-47162/</guid><description>CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 11 Jun 2026 18:32:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-47167: Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex</title><link>https://agentprime.io/advisories/CVE-2026-47167/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-47167/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 11 Jun 2026 18:31:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-46483: Vim: Command injection in tar#Vimuntar via missing shellescape {special} flag</title><link>https://agentprime.io/advisories/CVE-2026-46483/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-46483/</guid><description>CVSS 3.6 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 15 May 2026 14:57:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-45130: Vim: Heap Buffer Overflow in spell file loading</title><link>https://agentprime.io/advisories/CVE-2026-45130/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-45130/</guid><description>CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 08 May 2026 22:42:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-44656: Vim: OS Command Injection via &apos;path&apos; completion</title><link>https://agentprime.io/advisories/CVE-2026-44656/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-44656/</guid><description>CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 08 May 2026 22:40:49 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-42307: Vim: OS Command Injection in netrw</title><link>https://agentprime.io/advisories/CVE-2026-42307/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-42307/</guid><description>CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 08 May 2026 22:38:53 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-41411: Vim: Command injection via backtick expansion in tag filenames</title><link>https://agentprime.io/advisories/CVE-2026-41411/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-41411/</guid><description>CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 24 Apr 2026 16:51:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-39881: Vim Ex command injection in Vims NetBeans integration</title><link>https://agentprime.io/advisories/CVE-2026-39881/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-39881/</guid><description>CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 08 Apr 2026 20:18:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-35177: Path traversal issue with zip.vim in Vim</title><link>https://agentprime.io/advisories/CVE-2026-35177/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-35177/</guid><description>CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 06 Apr 2026 17:54:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-34982: Vim modeline bypass via various options affects Vim &lt; 9.2.0276</title><link>https://agentprime.io/advisories/CVE-2026-34982/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-34982/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 06 Apr 2026 15:16:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-34714: OS command injection in Vim</title><link>https://agentprime.io/advisories/CVE-2026-34714/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-34714/</guid><description>CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 30 Mar 2026 18:27:55 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-33412: Vim affected by Command injection via newline in glob()</title><link>https://agentprime.io/advisories/CVE-2026-33412/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33412/</guid><description>CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 24 Mar 2026 19:43:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-32249: NFA regex engine NULL pointer dereference affects Vim &lt; 9.2.0137</title><link>https://agentprime.io/advisories/CVE-2026-32249/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-32249/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 12 Mar 2026 19:17:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-28422: Vim has stack-buffer-overflow in build_stl_str_hl()</title><link>https://agentprime.io/advisories/CVE-2026-28422/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28422/</guid><description>CVSS 2.2 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Feb 2026 22:08:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-28421: Vim has a heap-buffer-overflow and a segmentation fault</title><link>https://agentprime.io/advisories/CVE-2026-28421/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28421/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Feb 2026 22:06:34 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-28420: Vim has Heap-based Buffer Overflow and OOB Read in :terminal</title><link>https://agentprime.io/advisories/CVE-2026-28420/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28420/</guid><description>CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Feb 2026 22:04:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-28419: Vim has Heap-based Buffer Underflow in Emacs tags parsing</title><link>https://agentprime.io/advisories/CVE-2026-28419/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28419/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Feb 2026 22:02:55 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-28418: Vim has Heap-based Buffer Overflow in Emacs tags parsing</title><link>https://agentprime.io/advisories/CVE-2026-28418/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28418/</guid><description>CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Feb 2026 21:58:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-28417: Vim has OS Command Injection in netrw</title><link>https://agentprime.io/advisories/CVE-2026-28417/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28417/</guid><description>CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Feb 2026 21:54:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-26269: Vim has a Netbeans specialKeys Stack Buffer Overflow</title><link>https://agentprime.io/advisories/CVE-2026-26269/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-26269/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 13 Feb 2026 19:18:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-25749: Heap Overflow in Vim</title><link>https://agentprime.io/advisories/CVE-2026-25749/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-25749/</guid><description>CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 06 Feb 2026 22:43:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-66476: Vim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-66476/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-66476/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 02 Dec 2025 21:49:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-9390: vim xxd xxd.c main buffer overflow</title><link>https://agentprime.io/advisories/CVE-2025-9390/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-9390/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 24 Aug 2025 14:02:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-9389: vim memmove-vec-unaligned-erms.S __memmove_avx_unaligned_erms memory corruption</title><link>https://agentprime.io/advisories/CVE-2025-9389/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-9389/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 24 Aug 2025 13:02:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-55157: Vim heap use-after-free vulnerability when processing recursive tuple data types</title><link>https://agentprime.io/advisories/CVE-2025-55157/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-55157/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 11 Aug 2025 22:54:27 GMT</pubDate><category>CVE</category></item></channel></rss>