Linux · Security advisory · August 10, 2026

RHSA-2026:38510: vim-common security update

RHSA-2026:38510, released August 10, 2026, fixes 4 CVEs in vim-common (version 2:8.0.1763-27.el8_10). None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0055

46th percentile

Priority of the 4 CVEs

Patch now 0
                                Urgent 0
                                High 4
                                Routine 0

Fixed package versions

Product	Release	Fixed in
vim-common	RHEL 8	2:8.0.1763-27.el8_10

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2026-46483	Vim: Command injection in tar#Vimuntar via missing shellescape {special} flag	7.3	0.0055	None reported
High	CVE-2026-47162	Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name	8.8	0.0028	None reported
High	CVE-2026-52858	Vim: Arbitrary Code Execution via Python Omni-Completion	7.8	0.0020	None reported
High	CVE-2026-47167	Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex	7.3	0.0014	None reported

Also fixes CVE-2026-46483

ALAS2023-2026-1862
vim-common, vim-data, vim-debuginfo and 9 more on amzn 2023
RLSA-2026:38509
vim on rocky 10
RLSA-2026:38511
vim on rocky 9
RLSA-2026:38510
vim on rocky 8
RHSA-2026:38511
vim-common on RHEL 9
ELSA-2026-38509
vim-X11, vim-common, vim-data and 4 more on ol 10
ELSA-2026-38511
vim-X11, vim-common, vim-enhanced and 2 more on ol 9
ALSA-2026:38509
vim-X11, vim-common, vim-data and 4 more on almalinux 10

Vendor advisory

https://access.redhat.com/errata/RHSA-2026:38510

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo