CVE-2026-28422
published 2026-02-27CVE-2026-28422: Vim is an open source, command line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in `build_stl_str_hl()` when rendering a statusline…
PriorityP411low2.2CVSS 3.1
AVLACHPRLUIRSUCNILAN
EPSS
0.14%
3.9th percentile
Vim is an open source, command line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in `build_stl_str_hl()` when rendering a statusline with a multi-byte fill character on a very wide terminal. Version 9.2.0078 patches the issue.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | vim | < vim 2:9.2.0119-1 (forky) | vim 2:9.2.0119-1 (forky) |
| msrc | azl3_vim_9.1.1616-1_on_azure_linux_3.0 | — | — |
| msrc | cbl2_vim_9.1.1616-1_on_cbl_mariner_2.0 | — | — |
| vim | vim | < 9.2.0078 | 9.2.0078 |
| vim | vim | >= 0 < 2:9.2.0119-1 | 2:9.2.0119-1 |
| vim | vim | >= 0 < 2:8.2.3995-1ubuntu2.26 | 2:8.2.3995-1ubuntu2.26 |
| vim | vim | >= 0 < 2:9.1.0016-1ubuntu7.10 | 2:9.1.0016-1ubuntu7.10 |
| vim | vim | >= 0 < 2:9.1.0967-1ubuntu6.1 | 2:9.1.0967-1ubuntu6.1 |
| vim | vim | >= 0 < 2:7.4.052-1ubuntu3.1+esm23 | 2:7.4.052-1ubuntu3.1+esm23 |
| vim | vim | >= 0 < 2:7.4.1689-3ubuntu1.5+esm29 | 2:7.4.1689-3ubuntu1.5+esm29 |
| vim | vim | >= 0 < 2:8.0.1453-1ubuntu1.13+esm14 | 2:8.0.1453-1ubuntu1.13+esm14 |
| vim | vim | >= 0 < 2:8.1.2269-1ubuntu5.32+esm2 | 2:8.1.2269-1ubuntu5.32+esm2 |
CVSS provenance
nvdv3.12.2LOWCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N
osv6.6MEDIUM
vendor_ubuntu6.6MEDIUM
vendor_debian2.2LOW
vendor_msrc2.2LOW
vendor_redhat2.2LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Vim vulnerabilities
vendor_ubuntu·2026-03-16·CVSS 6.6
CVE-2026-25749 [MEDIUM] Vim vulnerabilities
Title: Vim vulnerabilities
Summary: Several security issues were fixed in Vim.
Rahul Hoysala discovered that Vim did not correctly handle certain tag
resolutions. An attacker could possibly use this issue to cause a denial
of service. (CVE-2026-25749)
It was discovered that Vim did not correctly handle processing certain
specialKey commands. An attacker could possibly use this issue to cause a
denial of service or execute arbitrary code. (CVE-2026-26269)
Kim Dong Han discovered that Vim did not correctly handle opening certain
URLs. If a user or system were tricked into opening a specially crafted
file, an attacker could possibly use this issue to execute arbitrary code.
(CVE-2026-28417)
Kim Dong Han discovered that Vim did not correctly handle parsing
Emacs-style tag files. An attack
Red Hat
vim: Vim: Integrity impact due to stack-buffer-overflow via wide terminal statusline rendering
vendor_redhat·2026-02-27·CVSS 2.2
CVE-2026-28422 [LOW] CWE-135 vim: Vim: Integrity impact due to stack-buffer-overflow via wide terminal statusline rendering
vim: Vim: Integrity impact due to stack-buffer-overflow via wide terminal statusline rendering
Vim is an open source, command line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in `build_stl_str_hl()` when rendering a statusline with a multi-byte fill character on a very wide terminal. Version 9.2.0078 patches the issue.
A flaw was found in Vim, an open-source command-line text editor. A local user could exploit a stack-buffer-overflow vulnerability in the `build_stl_str_hl()` function by rendering a statusline with a multi-byte fill character on a very wide terminal. This could lead to an integrity impact, where data might be modified.
Mitigation: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Produc
Microsoft
Vim has stack-buffer-overflow in build_stl_str_hl()
vendor_msrc·2026-02-10·CVSS 2.2
CVE-2026-28422 [LOW] CWE-121 Vim has stack-buffer-overflow in build_stl_str_hl()
Vim has stack-buffer-overflow in build_stl_str_hl()
Mariner: Mariner
GitHub_M: GitHub_M
Customer Action Required: Yes
Remediation: CBL-Mariner Releases
Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
Debian
CVE-2026-28422: vim - Vim is an open source, command line text editor. Prior to version 9.2.0078, a st...
vendor_debian·2026·CVSS 2.2
CVE-2026-28422 [LOW] CVE-2026-28422: vim - Vim is an open source, command line text editor. Prior to version 9.2.0078, a st...
Vim is an open source, command line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in `build_stl_str_hl()` when rendering a statusline with a multi-byte fill character on a very wide terminal. Version 9.2.0078 patches the issue.
Scope: local
bookworm: open
bullseye: open
forky: resolved (fixed in 2:9.2.0119-1)
sid: resolved (fixed in 2:9.2.0119-1)
trixie: open
VulDB
vim up to 9.2.0077 build_stl_str_hl stack-based overflow (GHSA-gmqx-prf2-8mwf / EUVD-2026-9090)
vuldb·2026-04-16·CVSS 2.2
CVE-2026-28422 [LOW] vim up to 9.2.0077 build_stl_str_hl stack-based overflow (GHSA-gmqx-prf2-8mwf / EUVD-2026-9090)
A vulnerability, which was classified as critical, has been found in vim up to 9.2.0077. This affects the function build_stl_str_hl. The manipulation leads to stack-based buffer overflow.
This vulnerability is documented as CVE-2026-28422. The attack can be initiated remotely. There is not any exploit available.
It is advisable to upgrade the affected component.
OSV
vim vulnerabilities
osv·2026-03-16·CVSS 6.6
CVE-2026-25749 [MEDIUM] vim vulnerabilities
vim vulnerabilities
Rahul Hoysala discovered that Vim did not correctly handle certain tag
resolutions. An attacker could possibly use this issue to cause a denial
of service. (CVE-2026-25749)
It was discovered that Vim did not correctly handle processing certain
specialKey commands. An attacker could possibly use this issue to cause a
denial of service or execute arbitrary code. (CVE-2026-26269)
Kim Dong Han discovered that Vim did not correctly handle opening certain
URLs. If a user or system were tricked into opening a specially crafted
file, an attacker could possibly use this issue to execute arbitrary code.
(CVE-2026-28417)
Kim Dong Han discovered that Vim did not correctly handle parsing
Emacs-style tag files. An attacker could possibly use this issue to cause
a denial of servic
OSV
CVE-2026-28422: Vim is an open source, command line text editor
osv·2026-02-27·CVSS 2.2
CVE-2026-28422 [LOW] CVE-2026-28422: Vim is an open source, command line text editor
Vim is an open source, command line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in `build_stl_str_hl()` when rendering a statusline with a multi-byte fill character on a very wide terminal. Version 9.2.0078 patches the issue.
No detection rules found.
No public exploits indexed.
Wiz
CVE-2026-28422 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 2.2
CVE-2026-28422 [LOW] CVE-2026-28422 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-28422 :
Vim vulnerability analysis and mitigation
build_stl_str_hl()
Source : NVD
## 2.2
Score
Published February 27, 2026
Severity LOW
CNA Score 2.2
Affected Technologies
Vim
Linux Fedora
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 0.3
Exploitation Probability (EPSS) N/A
Affected packages and libraries
vim-X11-debuginfo
vim-debuginfo
Sources
Alpine 3.10, 3.11, 3.12, 3.13, 3.14, 3.15, 3.16, 3.17, 3.18, 3.19, 3.20, 3.21, 3.22 Severity LOW Has Fix Added at: Mar 08, 2026
Alpine 3.23, edge Severity LOW Has Fix Added at: Mar 02, 2026
CBL-Mariner 2.0 Severity LOW Has Fix Added at: Mar 10, 2026
CBL-Mariner 3.0 Severity LOW Has Fix Added at: Mar 13, 2026
Chainguard H
Bugzilla
CVE-2026-28422 vim: Vim: Integrity impact due to stack-buffer-overflow via wide terminal statusline rendering
bugzilla·2026-02-27·CVSS 2.2
CVE-2026-28422 [LOW] CVE-2026-28422 vim: Vim: Integrity impact due to stack-buffer-overflow via wide terminal statusline rendering
CVE-2026-28422 vim: Vim: Integrity impact due to stack-buffer-overflow via wide terminal statusline rendering
Vim is an open source, command line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in `build_stl_str_hl()` when rendering a statusline with a multi-byte fill character on a very wide terminal. Version 9.2.0078 patches the issue.
2026-02-27
Published