Known vulnerabilities in vim (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:vim_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 203
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting vim (Ubuntu package) vim (Ubuntu package) is affected by 203 known vulnerabilities: 97 high, 35 medium, 71 low Critical High Medium Low

Vulnerabilities (203)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139390 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-73073
CWE-94 High
No
No
2:7.4.052-1ubuntu3.1+esm33, 2:7.4.1689-3ubuntu1.5+esm39, 2:8.0.1453-1ubuntu1.13+esm24, 2:8.1.2269-1ubuntu5.32+esm13, 2:8.2.3995-1ubuntu2.36, 2:9.1.0016-1ubuntu7.20, 2:9.1.2141-1ubuntu4.9 27.07.2026 SB2026072712
SB2026082677
SB2026091342
and 5 more
#VU135702 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-59856
CWE-94 High
No
No
2:7.4.052-1ubuntu3.1+esm31, 2:7.4.1689-3ubuntu1.5+esm37, 2:8.0.1453-1ubuntu1.13+esm22, 2:8.1.2269-1ubuntu5.32+esm10, 2:8.2.3995-1ubuntu2.34, 2:9.1.0016-1ubuntu7.18, 2:9.1.2141-1ubuntu4.7 29.06.2026 SB2026062909
SB20260715103
SB2026072430
and 6 more
#VU135701 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-59858
CWE-94 Medium
No
No
2:7.4.052-1ubuntu3.1+esm31, 2:7.4.1689-3ubuntu1.5+esm37, 2:8.0.1453-1ubuntu1.13+esm22, 2:8.1.2269-1ubuntu5.32+esm10, 2:8.2.3995-1ubuntu2.34, 2:9.1.0016-1ubuntu7.18, 2:9.1.2141-1ubuntu4.7 29.06.2026 SB2026062908
SB20260715103
SB2026072526
and 10 more
#VU135167 - Out-of-bounds write
CVE-2026-59857
CWE-787 Low
No
No
2:7.4.052-1ubuntu3.1+esm31, 2:7.4.1689-3ubuntu1.5+esm37, 2:8.0.1453-1ubuntu1.13+esm22, 2:8.1.2269-1ubuntu5.32+esm10, 2:8.2.3995-1ubuntu2.34, 2:9.1.0016-1ubuntu7.18, 2:9.1.2141-1ubuntu4.7 25.06.2026 SB2026062530
SB20260715103
SB2026072526
and 7 more
#VU134978 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-57456
CWE-94 High
No
No
2:7.4.052-1ubuntu3.1+esm30, 2:7.4.1689-3ubuntu1.5+esm36, 2:8.0.1453-1ubuntu1.13+esm21, 2:8.1.2269-1ubuntu5.32+esm9, 2:8.2.3995-1ubuntu2.33, 2:9.1.0016-1ubuntu7.17, 2:9.1.0967-1ubuntu6.8, 2:9.1.2141-1ubuntu4.6 22.06.2026 SB2026062216
SB2026070315
SB2026071933
and 7 more
#VU134977 - Out-of-bounds write
CVE-2026-57455
CWE-787 Low
No
No
2:7.4.052-1ubuntu3.1+esm30, 2:7.4.1689-3ubuntu1.5+esm36, 2:8.0.1453-1ubuntu1.13+esm21, 2:8.1.2269-1ubuntu5.32+esm9, 2:8.2.3995-1ubuntu2.33, 2:9.1.0016-1ubuntu7.17, 2:9.1.0967-1ubuntu6.8, 2:9.1.2141-1ubuntu4.6 22.06.2026 SB2026062215
SB2026070315
SB2026071933
and 7 more
#VU134975 - Command injection
CVE-2026-57453
CWE-77 Medium
No
No
2:7.4.052-1ubuntu3.1+esm30, 2:7.4.1689-3ubuntu1.5+esm36, 2:8.0.1453-1ubuntu1.13+esm21, 2:8.1.2269-1ubuntu5.32+esm9, 2:8.2.3995-1ubuntu2.33, 2:9.1.0016-1ubuntu7.17, 2:9.1.0967-1ubuntu6.8, 2:9.1.2141-1ubuntu4.6 22.06.2026 SB2026062213
SB2026070315
#VU134969 - Out-of-bounds read
CVE-2026-57452
CWE-125 Medium
No
No
2:7.4.052-1ubuntu3.1+esm30, 2:7.4.1689-3ubuntu1.5+esm36, 2:8.0.1453-1ubuntu1.13+esm21, 2:8.1.2269-1ubuntu5.32+esm9, 2:8.2.3995-1ubuntu2.33, 2:9.1.0016-1ubuntu7.17, 2:9.1.0967-1ubuntu6.8, 2:9.1.2141-1ubuntu4.6 19.06.2026 SB20260619128
SB2026070315
SB2026071933
#VU134882 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-55895
CWE-94 High
No
No
2:7.4.052-1ubuntu3.1+esm30, 2:7.4.1689-3ubuntu1.5+esm36, 2:8.0.1453-1ubuntu1.13+esm21, 2:8.1.2269-1ubuntu5.32+esm9, 2:8.2.3995-1ubuntu2.33, 2:9.1.0016-1ubuntu7.17, 2:9.1.0967-1ubuntu6.8, 2:9.1.2141-1ubuntu4.6 18.06.2026 SB2026061855
SB2026070315
SB2026070617
and 3 more
#VU134881 - Out-of-bounds write
CVE-2026-55892
CWE-787 Medium
No
No
2:7.4.052-1ubuntu3.1+esm30, 2:7.4.1689-3ubuntu1.5+esm36, 2:8.0.1453-1ubuntu1.13+esm21, 2:8.1.2269-1ubuntu5.32+esm9, 2:8.2.3995-1ubuntu2.33, 2:9.1.0016-1ubuntu7.17, 2:9.1.0967-1ubuntu6.8, 2:9.1.2141-1ubuntu4.6 18.06.2026 SB2026061854
SB2026070315
SB2026070617
and 7 more
#VU134580 - Out-of-bounds write
CVE-2026-55693
CWE-787 Medium
No
No
2:7.4.052-1ubuntu3.1+esm30, 2:7.4.1689-3ubuntu1.5+esm36, 2:8.0.1453-1ubuntu1.13+esm21, 2:8.1.2269-1ubuntu5.32+esm9, 2:8.2.3995-1ubuntu2.33, 2:9.1.0016-1ubuntu7.17, 2:9.1.0967-1ubuntu6.8, 2:9.1.2141-1ubuntu4.6 16.06.2026 SB2026061605
SB2026070315
SB2026070617
and 10 more
#VU133463 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-52860
CWE-94 Medium
No
No
2:7.4.052-1ubuntu3.1+esm29, 2:7.4.1689-3ubuntu1.5+esm35, 2:8.0.1453-1ubuntu1.13+esm20, 2:8.1.2269-1ubuntu5.32+esm8, 2:8.2.3995-1ubuntu2.32, 2:9.1.0016-1ubuntu7.16, 2:9.1.0967-1ubuntu6.7, 2:9.1.2141-1ubuntu4.5 08.06.2026 SB2026060814
SB20260619120
SB2026062488
and 4 more
#VU133142 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-52858
CWE-94 Medium
No
No
2:7.4.052-1ubuntu3.1+esm29, 2:7.4.1689-3ubuntu1.5+esm35, 2:8.0.1453-1ubuntu1.13+esm20, 2:8.1.2269-1ubuntu5.32+esm8, 2:8.2.3995-1ubuntu2.32, 2:9.1.0016-1ubuntu7.16, 2:9.1.0967-1ubuntu6.7, 2:9.1.2141-1ubuntu4.5 01.06.2026 SB2026060172
SB20260619120
SB2026062488
and 8 more
#VU133141 - Out-of-bounds read
CVE-2026-52859
CWE-125 Medium
No
No
2:7.4.052-1ubuntu3.1+esm29, 2:7.4.1689-3ubuntu1.5+esm35, 2:8.0.1453-1ubuntu1.13+esm20, 2:8.1.2269-1ubuntu5.32+esm8, 2:8.2.3995-1ubuntu2.32, 2:9.1.0016-1ubuntu7.16, 2:9.1.0967-1ubuntu6.7, 2:9.1.2141-1ubuntu4.5 01.06.2026 SB2026060171
SB20260619120
SB2026062488
and 8 more
#VU131626 - Eval Injection
CVE-2026-47167
CWE-95 Medium
No
No
2:7.4.052-1ubuntu3.1+esm29, 2:7.4.1689-3ubuntu1.5+esm35, 2:8.0.1453-1ubuntu1.13+esm20, 2:8.1.2269-1ubuntu5.32+esm8, 2:8.2.3995-1ubuntu2.32, 2:9.1.0016-1ubuntu7.16, 2:9.1.0967-1ubuntu6.7, 2:9.1.2141-1ubuntu4.5 18.05.2026 SB2026051807
SB20260619120
SB2026062488
and 7 more
#VU131625 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-47162
CWE-94 Medium
No
No
2:7.4.052-1ubuntu3.1+esm29, 2:7.4.1689-3ubuntu1.5+esm35, 2:8.0.1453-1ubuntu1.13+esm20, 2:8.1.2269-1ubuntu5.32+esm8, 2:8.2.3995-1ubuntu2.32, 2:9.1.0016-1ubuntu7.16, 2:9.1.0967-1ubuntu6.7, 2:9.1.2141-1ubuntu4.5 18.05.2026 SB2026051806
SB20260619120
SB2026062488
and 8 more
#VU131545 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-43961
CWE-94 Medium
No
No
2:7.4.052-1ubuntu3.1+esm28, 2:7.4.1689-3ubuntu1.5+esm34, 2:8.0.1453-1ubuntu1.13+esm19, 2:8.1.2269-1ubuntu5.32+esm7, 2:8.2.3995-1ubuntu2.31, 2:9.1.0016-1ubuntu7.15, 2:9.1.0967-1ubuntu6.6, 2:9.1.2141-1ubuntu4.3 15.05.2026 SB2026051518
SB20260529238
SB2026053001
and 9 more
#VU131544 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-46483
CWE-78 Low
No
No
2:7.4.052-1ubuntu3.1+esm28, 2:7.4.1689-3ubuntu1.5+esm34, 2:8.0.1453-1ubuntu1.13+esm19, 2:8.1.2269-1ubuntu5.32+esm7, 2:8.2.3995-1ubuntu2.31, 2:9.1.0016-1ubuntu7.15, 2:9.1.0967-1ubuntu6.6, 2:9.1.2141-1ubuntu4.3 15.05.2026 SB2026051517
SB2026052130
SB2026052523
and 23 more
#VU126870 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-41411
CWE-78 Medium
No
No
2:7.4.052-1ubuntu3.1+esm27, 2:7.4.1689-3ubuntu1.5+esm33, 2:8.0.1453-1ubuntu1.13+esm18, 2:8.1.2269-1ubuntu5.32+esm6, 2:8.2.3995-1ubuntu2.29, 2:9.1.0016-1ubuntu7.13, 2:9.1.0967-1ubuntu6.4, 2:9.1.2141-1ubuntu4.1 22.04.2026 SB20260422223
SB2026050840
SB20260509158
and 18 more
#VU125036 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-35177
CWE-22 Medium
No
No
2:7.4.052-1ubuntu3.1+esm25, 2:7.4.052-1ubuntu3.1+esm30, 2:7.4.1689-3ubuntu1.5+esm31, 2:7.4.1689-3ubuntu1.5+esm36, 2:8.0.1453-1ubuntu1.13+esm16, 2:8.0.1453-1ubuntu1.13+esm21, 2:8.1.2269-1ubuntu5.32+esm4, 2:8.1.2269-1ubuntu5.32+esm9, 2:8.2.3995-1ubuntu2.28, 2:8.2.3995-1ubuntu2.29, 2:8.2.3995-1ubuntu2.33, 2:9.1.0016-1ubuntu7.12, 2:9.1.0016-1ubuntu7.13, 2:9.1.0016-1ubuntu7.17, 2:9.1.0967-1ubuntu6.3, 2:9.1.0967-1ubuntu6.4, 2:9.1.0967-1ubuntu6.8, 2:9.1.2141-1ubuntu4.1, 2:9.1.2141-1ubuntu4.6 07.04.2026 SB2026040793
SB2026042846
SB2026050311
and 12 more


Showing elements 1 - 20 out of 203