Skip to main content

Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

© 2026 Mondoo, Inc.

Log in Get Assessment

Vulnerability IntelligenceCVE-2026-28421

CVE-2026-28421

MEDIUM5.3

Vim has a heap-buffer-overflow and a segmentation fault

Published Feb 27, 2026

Modified 1 months ago

Details

Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault (SEGV) exist in Vim's swap file recovery logic. Both are caused by unvalidated fields read from crafted pointer blocks within a swap file. Version 9.2.0077 fixes the issue.

References

http://www.openwall.com/lists/oss-security/2026/02/27/10

https://github.com/vim/vim/commit/65c1a143c331c886dc28

https://github.com/vim/vim/releases/tag/v9.2.0077

https://github.com/vim/vim/security/advisories/GHSA-r2gw-2x48-jj5p

https://www.cve.org/CVERecord?id=CVE-2026-28421

CVSS Analysis

CVSS v3.1

5.3

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

RequiredUI:R

Scope

Scope

UnchangedS:U

Impact

Confidentiality

LowC:L

Integrity

LowI:L

Availability

LowA:L

5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Weakness Type (CWE)

Input Validation

Improper Input Validation

Other

Ecosystems

Timeline

PublishedFeb 27, 2026

ModifiedMar 2, 2026

CVE-2026-28421 | Mondoo Vulnerability Intelligence