Msrc Cbl2 Vim 9.1.1616-1 On Cbl Mariner 2.0 vulnerabilities

CVE-2026-28421 [MEDIUM] CWE-20 Vim has a heap-buffer-overflow and a segmentation fault Vim has a heap-buffer-overflow and a segmentation fault Mariner: Mariner GitHub_M: GitHub_M Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2026-28420 [MEDIUM] CWE-122 Vim has Heap-based Buffer Overflow and OOB Read in :terminal Vim has Heap-based Buffer Overflow and OOB Read in :terminal Mariner: Mariner GitHub_M: GitHub_M Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2026-28419 [MEDIUM] CWE-124 Vim has Heap-based Buffer Underflow in Emacs tags parsing Vim has Heap-based Buffer Underflow in Emacs tags parsing Mariner: Mariner GitHub_M: GitHub_M Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2026-28418 [MEDIUM] CWE-122 Vim has Heap-based Buffer Overflow in Emacs tags parsing Vim has Heap-based Buffer Overflow in Emacs tags parsing Mariner: Mariner GitHub_M: GitHub_M Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2026-28417 [MEDIUM] CWE-86 Vim has OS Command Injection in netrw Vim has OS Command Injection in netrw Mariner: Mariner GitHub_M: GitHub_M Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2026-28422 [LOW] CWE-121 Vim has stack-buffer-overflow in build_stl_str_hl() Vim has stack-buffer-overflow in build_stl_str_hl() Mariner: Mariner GitHub_M: GitHub_M Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2025-66476 [HIGH] CWE-427 Vim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerability Vim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerability Mariner: Mariner GitHub_M: GitHub_M Customer Action Required: Yes