CVE-2026-28422
Vim is an open source, command line text editor.
Published Feb 27, 2026 · updated Jun 17, 2026 · vim vim
Vim is an open source, command line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in when rendering a statusline with a multi-byte fill character on a very wide terminal. Version 9.2.0078 patches the issue.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Feb 27, 2026 · NIST NVD
Detected
Vim is an open source, command line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in when rendering a statusline with a multi-byte fill character on a very wide terminal. Version 9.2.0078 patches the issue.
Jun 17, 2026 · NIST NVD
Updated
Vim is an open source, command line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in when rendering a statusline with a multi-byte fill character on a very wide terminal. Version 9.2.0078 patches the issue.
Affected
- cpe vim/vimversion unspecified
Sources
- NIST NVDVulnerability recordCVE-2026-28422
Vim is an open source, command line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in when rendering a statusline with a multi-byte fill character on a very wide terminal. Version 9.2.0078 patches the issue.
nvd.nist.gov