HighFix available
Red Hat Security Advisory: vim security update
Type: advisorySources: OSV
- Products
- vim, vim-X11, vim-common, vim-enhanced
- Affected versions
- Not specified
- Fixed versions
- 2:9.1.083-9.el10_2.20
- CVEs
- CVE-2026-28420, CVE-2026-52859, CVE-2026-55892, CVE-2026-59857, CVE-2026-73072, CVE-2026-73076, CVE-2026-73077, CVE-2026-73078
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 30 Oct 2026, 12:01 UTC · Revision 1
Source evidence
Red Hat Security Advisory: vim security update
core-osv · Original sourcePublished 10 Sept 2026, 10:17 UTC
Red Hat Security Advisory: vim security update
osv:RHSA-2026:66336
vim-X11
Fixed versions: 2:9.1.083-9.el10_2.20
vim-enhanced
Fixed versions: 2:9.1.083-9.el10_2.20
vim
Fixed versions: 2:9.1.083-9.el10_2.20
vim-common
Fixed versions: 2:9.1.083-9.el10_2.20
Complete source record
{
"id": "45f5b3119db0f49ab29bde2c05c4704217dd833367cac900bfde37b9c25112f0",
"url": "https://osv.dev/vulnerability/RHSA-2026%3A66336",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Red Hat Security Advisory: vim security update",
"summary": "Red Hat Security Advisory: vim security update",
"evidence": "osv:RHSA-2026:66336",
"products": [
{
"name": {
"value": "vim-X11",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2:9.1.083-9.el10_2.20",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "vim-enhanced",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2:9.1.083-9.el10_2.20",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "vim",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2:9.1.083-9.el10_2.20",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "vim-common",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2:9.1.083-9.el10_2.20",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
}
],
"severity": "high",
"structured": {
"id": "RHSA-2026:66336",
"aliases": [
"RHSA-2026:66336"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2:9.1.083-9.el10_2.20"
}
]
}
],
"package": {
"name": "vim-X11",
"purl": "pkg:rpm/redhat/vim-X11",
"ecosystem": "Red Hat:enterprise_linux:10.2"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:66336.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2:9.1.083-9.el10_2.20"
}
]
}
],
"package": {
"name": "vim-enhanced",
"purl": "pkg:rpm/redhat/vim-enhanced",
"ecosystem": "Red Hat:enterprise_linux:10.2"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:66336.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2:9.1.083-9.el10_2.20"
}
]
}
],
"package": {
"name": "vim",
"purl": "pkg:rpm/redhat/vim",
"ecosystem": "Red Hat:enterprise_linux:10.2"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:66336.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2:9.1.083-9.el10_2.20"
}
]
}
],
"package": {
"name": "vim-common",
"purl": "pkg:rpm/redhat/vim-common",
"ecosystem": "Red Hat:enterprise_linux:10.2"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:66336.json"
}
}
],
"modified": "2026-10-14T10:26:55Z",
"provider": "osv",
"upstream": [
"CVE-2026-28420",
"CVE-2026-52859",
"CVE-2026-55892",
"CVE-2026-59857",
"CVE-2026-73072",
"CVE-2026-73076",
"CVE-2026-73077",
"CVE-2026-73078"
],
"references": [
"https://access.redhat.com/errata/RHSA-2026:66336",
"https://access.redhat.com/security/updates/classification/#important",
"https://bugzilla.redhat.com/show_bug.cgi?id=2443484",
"https://bugzilla.redhat.com/show_bug.cgi?id=2487989",
"https://bugzilla.redhat.com/show_bug.cgi?id=2492975",
"https://bugzilla.redhat.com/show_bug.cgi?id=2498863",
"https://bugzilla.redhat.com/show_bug.cgi?id=2514034",
"https://bugzilla.redhat.com/show_bug.cgi?id=2514037",
"https://bugzilla.redhat.com/show_bug.cgi?id=2514058",
"https://bugzilla.redhat.com/show_bug.cgi?id=2514065",
"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_66336.json",
"https://access.redhat.com/security/cve/CVE-2026-28420",
"https://www.cve.org/CVERecord?id=CVE-2026-28420",
"https://nvd.nist.gov/vuln/detail/CVE-2026-28420",
"https://github.com/vim/vim/commit/bb6de2105b160e729c34063",
"https://github.com/vim/vim/releases/tag/v9.2.0076",
"https://github.com/vim/vim/security/advisories/GHSA-rvj2-jrf9-2phg",
"https://access.redhat.com/security/cve/CVE-2026-52859",
"https://www.cve.org/CVERecord?id=CVE-2026-52859",
"https://nvd.nist.gov/vuln/detail/CVE-2026-52859",
"https://github.com/vim/vim/commit/63680c6d3d52477817b49cd1a66e7aabe8a7aa19",
"https://github.com/vim/vim/releases/tag/v9.2.0565",
"https://github.com/vim/vim/security/advisories/GHSA-47gw-8gc3-mgcm",
"https://access.redhat.com/security/cve/CVE-2026-55892",
"https://www.cve.org/CVERecord?id=CVE-2026-55892",
"https://nvd.nist.gov/vuln/detail/CVE-2026-55892",
"https://github.com/vim/vim/commit/8325b193bba5f01e7a7d8241f",
"https://github.com/vim/vim/releases/tag/v9.2.0662",
"https://github.com/vim/vim/security/advisories/GHSA-qm9w-fmpj-879h",
"https://access.redhat.com/security/cve/CVE-2026-59857",
"https://www.cve.org/CVERecord?id=CVE-2026-59857",
"https://nvd.nist.gov/vuln/detail/CVE-2026-59857",
"https://github.com/vim/vim/commit/d22ff1c955ff87e8273210eae125aab0e85b6c30",
"https://github.com/vim/vim/security/advisories/GHSA-m3hf-xcm3-xhm2",
"https://access.redhat.com/security/cve/CVE-2026-73072",
"https://www.cve.org/CVERecord?id=CVE-2026-73072",
"https://nvd.nist.gov/vuln/detail/CVE-2026-73072",
"https://github.com/vim/vim/commit/05c41c922309c7a11b6ec2f124be66551c90d66a",
"https://github.com/vim/vim/releases/tag/v9.2.0846",
"https://github.com/vim/vim/security/advisories/GHSA-9jqx-hgpr-6v64",
"https://access.redhat.com/security/cve/CVE-2026-73076",
"https://www.cve.org/CVERecord?id=CVE-2026-73076",
"https://nvd.nist.gov/vuln/detail/CVE-2026-73076",
"https://github.com/vim/vim/commit/581a2f3ac9c6f96a26324f6b2c8c11415fd0d452",
"https://github.com/vim/vim/security/advisories/GHSA-r22p-fhw4-84p2",
"https://access.redhat.com/security/cve/CVE-2026-73077",
"https://www.cve.org/CVERecord?id=CVE-2026-73077",
"https://nvd.nist.gov/vuln/detail/CVE-2026-73077",
"https://github.com/vim/vim/commit/c5a82fe013e73c98004ad7cd4f906b1ad1ed610e",
"https://github.com/vim/vim/security/advisories/GHSA-r5v6-q6j8-8qw2",
"https://access.redhat.com/security/cve/CVE-2026-73078",
"https://www.cve.org/CVERecord?id=CVE-2026-73078",
"https://nvd.nist.gov/vuln/detail/CVE-2026-73078",
"https://github.com/vim/vim/commit/29c6fd090d4520592f8be7d9ec81190edf25ef69",
"https://github.com/vim/vim/security/advisories/GHSA-rcr7-f3wr-22r2"
]
},
"related_cves": [
{
"value": "CVE-2026-28420",
"evidence": "/upstream"
},
{
"value": "CVE-2026-52859",
"evidence": "/upstream"
},
{
"value": "CVE-2026-55892",
"evidence": "/upstream"
},
{
"value": "CVE-2026-59857",
"evidence": "/upstream"
},
{
"value": "CVE-2026-73072",
"evidence": "/upstream"
},
{
"value": "CVE-2026-73076",
"evidence": "/upstream"
},
{
"value": "CVE-2026-73077",
"evidence": "/upstream"
},
{
"value": "CVE-2026-73078",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 315986,
"published_at": "2026-09-10T10:17:17+00:00"
}