EST

PRE-CVE

vim

Vim tabpanel modeline escape

56% confidence

Description

A vulnerability in Vim allows for modeline escape in versions prior to 9.2.0272. [Auto-archived: reprocess_no_remaining_articles — 2026-04-01T21:35:21.734Z]

Affected Products

Vendor	Product	Versions
vim	—	< 9.2.0272

Related News (3 articles)

Tier C

oss-security17h ago

Re: [vim-security] Vim tabpanel modeline escape affects Vim < 9.2.0272

→ No new info (linked only)

Tier C

oss-security1d ago

Re: [vim-security] Vim tabpanel modeline escape affects Vim < 9.2.0272

→ No new info (linked only)

Tier C

oss-security1d ago

Re: [vim-security] Vim tabpanel modeline escape affects Vim < 9.2.0272

→ No new info (linked only)

CISA KEV❌ No

Actively exploited❌ No

PublishedApr 1, 2026

Last enriched4h ago

Trending Score21

Source articles3

Independent1

Info Completeness4/14

Missing: cve_id, product, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

CRITICALCVE-2026-34714

Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} injection occurs with tabpanel lacking P_MLE.

Trending: 44

MEDIUMCVE-2026-25749

Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vu

Trending: 22

MEDIUMCVE-2026-33412

Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob() function on Unix-like systems. By including a newline character (\n

Trending: 17

MEDIUMCVE-2026-28420

Vim is an open source, command line text editor. Prior to version 9.2.0076, a heap-based buffer overflow WRITE and an out-of-bounds READ exist in Vim's terminal emulator when processing maximum combin

Trending: 15

MEDIUMCVE-2026-28421

Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault (SEGV) exist in Vim's swap file recovery logic. Both are caused by unva

Trending: 15

Pin to Dashboard

Verification

State: archived

Confidence: 56%

Vulnerability Timeline

CVE Published

Apr 1, 2026

Discovered by ZDM

Apr 1, 2026