A heap-based buffer overflow in Vim’s Emacs-style tags parsing (tracked as CVE-2026-28418) has been disclosed and patched: users should update to Vim 9.2.0074 or later immediately to eliminate a crash-inducing out-of-bounds read that can be triggered by a crafted tags file. (github.com)...
