Vim < 9.2.0076 Heap-based Buffer Overflow and OOB Read (GHSA-rvj2-jrf9-2phg)

Language:

Version 1.6 Aug 26, 2026, 6:30 PM Logic Changes (avoid false positive) Plugin Feed: 202608261830
Version 1.5 May 1, 2026, 7:22 AM IAVM reference Plugin Feed: 202605010722
Version 1.4 Apr 23, 2026, 10:45 PM Plugin categorization (Ensure set to Misc. plugin family and add Windows/Unix Agent support) Plugin Feed: 202604232245
Version 1.3 Mar 17, 2026, 4:16 PM CVSS metrics ("CVSSv2 score" set to 3.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:P/A:P") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:OF/RC:C") CVSSv2 score source (set to "CVE-2026-28420") CVSSv2 severity (based on CVE-2026-28420, severity decreased from "High" to "Low") CVSSv3 score source (changed from "CVE-2026-28420" to none) Plugin Feed: 202603171616
Version 1.2 Mar 10, 2026, 12:56 PM CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C") Exploit attributes ("Exploit available" set to "False") Exploit attributes ("Exploitability ease" set to "No known exploits are available") Plugin Feed: 202603101256
Version 1.1 Mar 9, 2026, 5:15 PM New Plugin Feed: 202603091715

* Changelogs are generally available for changes made after Nov 1, 2022