Known vulnerabilities in vim (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:vim_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 203
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting vim (Ubuntu package) vim (Ubuntu package) is affected by 203 known vulnerabilities: 97 high, 35 medium, 71 low Critical High Medium Low

Vulnerabilities (203)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139390 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-73073
CWE-94 High
No
No
2:7.4.052-1ubuntu3.1+esm33, 2:7.4.1689-3ubuntu1.5+esm39, 2:8.0.1453-1ubuntu1.13+esm24, 2:8.1.2269-1ubuntu5.32+esm13, 2:8.2.3995-1ubuntu2.36, 2:9.1.0016-1ubuntu7.20 27.07.2026 SB2026072712
SB2026082677
#VU135702 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-59856
CWE-94 High
No
No
2:7.4.052-1ubuntu3.1+esm31, 2:7.4.1689-3ubuntu1.5+esm37, 2:8.0.1453-1ubuntu1.13+esm22, 2:8.1.2269-1ubuntu5.32+esm10, 2:8.2.3995-1ubuntu2.34, 2:9.1.0016-1ubuntu7.18, 2:9.1.2141-1ubuntu4.7 29.06.2026 SB2026062909
SB20260715103
SB2026072430
and 4 more
#VU135701 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-59858
CWE-94 Medium
No
No
2:7.4.052-1ubuntu3.1+esm31, 2:7.4.1689-3ubuntu1.5+esm37, 2:8.0.1453-1ubuntu1.13+esm22, 2:8.1.2269-1ubuntu5.32+esm10, 2:8.2.3995-1ubuntu2.34, 2:9.1.0016-1ubuntu7.18, 2:9.1.2141-1ubuntu4.7 29.06.2026 SB2026062908
SB20260715103
SB2026072526
and 5 more
#VU135167 - Out-of-bounds write
CVE-2026-59857
CWE-787 Low
No
No
2:7.4.052-1ubuntu3.1+esm31, 2:7.4.1689-3ubuntu1.5+esm37, 2:8.0.1453-1ubuntu1.13+esm22, 2:8.1.2269-1ubuntu5.32+esm10, 2:8.2.3995-1ubuntu2.34, 2:9.1.0016-1ubuntu7.18, 2:9.1.2141-1ubuntu4.7 25.06.2026 SB2026062530
SB20260715103
SB2026072526
and 3 more
#VU134978 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-57456
CWE-94 High
No
No
2:7.4.052-1ubuntu3.1+esm30, 2:7.4.1689-3ubuntu1.5+esm36, 2:8.0.1453-1ubuntu1.13+esm21, 2:8.1.2269-1ubuntu5.32+esm9, 2:8.2.3995-1ubuntu2.33, 2:9.1.0016-1ubuntu7.17, 2:9.1.0967-1ubuntu6.8, 2:9.1.2141-1ubuntu4.6 22.06.2026 SB2026062216
SB2026070315
SB2026071933
and 3 more
#VU134977 - Out-of-bounds write
CVE-2026-57455
CWE-787 Low
No
No
2:7.4.052-1ubuntu3.1+esm30, 2:7.4.1689-3ubuntu1.5+esm36, 2:8.0.1453-1ubuntu1.13+esm21, 2:8.1.2269-1ubuntu5.32+esm9, 2:8.2.3995-1ubuntu2.33, 2:9.1.0016-1ubuntu7.17, 2:9.1.0967-1ubuntu6.8, 2:9.1.2141-1ubuntu4.6 22.06.2026 SB2026062215
SB2026070315
SB2026071933
and 3 more
#VU134975 - Command injection
CVE-2026-57453
CWE-77 Medium
No
No
2:7.4.052-1ubuntu3.1+esm30, 2:7.4.1689-3ubuntu1.5+esm36, 2:8.0.1453-1ubuntu1.13+esm21, 2:8.1.2269-1ubuntu5.32+esm9, 2:8.2.3995-1ubuntu2.33, 2:9.1.0016-1ubuntu7.17, 2:9.1.0967-1ubuntu6.8, 2:9.1.2141-1ubuntu4.6 22.06.2026 SB2026062213
SB2026070315
#VU134969 - Out-of-bounds read
CVE-2026-57452
CWE-125 Medium
No
No
2:7.4.052-1ubuntu3.1+esm30, 2:7.4.1689-3ubuntu1.5+esm36, 2:8.0.1453-1ubuntu1.13+esm21, 2:8.1.2269-1ubuntu5.32+esm9, 2:8.2.3995-1ubuntu2.33, 2:9.1.0016-1ubuntu7.17, 2:9.1.0967-1ubuntu6.8, 2:9.1.2141-1ubuntu4.6 19.06.2026 SB20260619128
SB2026070315
SB2026071933
#VU134882 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-55895
CWE-94 High
No
No
2:7.4.052-1ubuntu3.1+esm30, 2:7.4.1689-3ubuntu1.5+esm36, 2:8.0.1453-1ubuntu1.13+esm21, 2:8.1.2269-1ubuntu5.32+esm9, 2:8.2.3995-1ubuntu2.33, 2:9.1.0016-1ubuntu7.17, 2:9.1.0967-1ubuntu6.8, 2:9.1.2141-1ubuntu4.6 18.06.2026 SB2026061855
SB2026070315
SB2026070617
and 3 more
#VU134881 - Out-of-bounds write
CVE-2026-55892
CWE-787 Medium
No
No
2:7.4.052-1ubuntu3.1+esm30, 2:7.4.1689-3ubuntu1.5+esm36, 2:8.0.1453-1ubuntu1.13+esm21, 2:8.1.2269-1ubuntu5.32+esm9, 2:8.2.3995-1ubuntu2.33, 2:9.1.0016-1ubuntu7.17, 2:9.1.0967-1ubuntu6.8, 2:9.1.2141-1ubuntu4.6 18.06.2026 SB2026061854
SB2026070315
SB2026070617
and 3 more
#VU134580 - Out-of-bounds write
CVE-2026-55693
CWE-787 Medium
No
No
2:7.4.052-1ubuntu3.1+esm30, 2:7.4.1689-3ubuntu1.5+esm36, 2:8.0.1453-1ubuntu1.13+esm21, 2:8.1.2269-1ubuntu5.32+esm9, 2:8.2.3995-1ubuntu2.33, 2:9.1.0016-1ubuntu7.17, 2:9.1.0967-1ubuntu6.8, 2:9.1.2141-1ubuntu4.6 16.06.2026 SB2026061605
SB2026070315
SB2026070617
and 6 more
#VU133463 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-52860
CWE-94 Medium
No
No
2:7.4.052-1ubuntu3.1+esm29, 2:7.4.1689-3ubuntu1.5+esm35, 2:8.0.1453-1ubuntu1.13+esm20, 2:8.1.2269-1ubuntu5.32+esm8, 2:8.2.3995-1ubuntu2.32, 2:9.1.0016-1ubuntu7.16, 2:9.1.0967-1ubuntu6.7, 2:9.1.2141-1ubuntu4.5 08.06.2026 SB2026060814
SB20260619120
SB2026062488
and 4 more
#VU133142 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-52858
CWE-94 Medium
No
No
2:7.4.052-1ubuntu3.1+esm29, 2:7.4.1689-3ubuntu1.5+esm35, 2:8.0.1453-1ubuntu1.13+esm20, 2:8.1.2269-1ubuntu5.32+esm8, 2:8.2.3995-1ubuntu2.32, 2:9.1.0016-1ubuntu7.16, 2:9.1.0967-1ubuntu6.7, 2:9.1.2141-1ubuntu4.5 01.06.2026 SB2026060172
SB20260619120
SB2026062488
and 3 more
#VU133141 - Out-of-bounds read
CVE-2026-52859
CWE-125 Medium
No
No
2:7.4.052-1ubuntu3.1+esm29, 2:7.4.1689-3ubuntu1.5+esm35, 2:8.0.1453-1ubuntu1.13+esm20, 2:8.1.2269-1ubuntu5.32+esm8, 2:8.2.3995-1ubuntu2.32, 2:9.1.0016-1ubuntu7.16, 2:9.1.0967-1ubuntu6.7, 2:9.1.2141-1ubuntu4.5 01.06.2026 SB2026060171
SB20260619120
SB2026062488
and 4 more
#VU131626 - Eval Injection
CVE-2026-47167
CWE-95 Medium
No
No
2:7.4.052-1ubuntu3.1+esm29, 2:7.4.1689-3ubuntu1.5+esm35, 2:8.0.1453-1ubuntu1.13+esm20, 2:8.1.2269-1ubuntu5.32+esm8, 2:8.2.3995-1ubuntu2.32, 2:9.1.0016-1ubuntu7.16, 2:9.1.0967-1ubuntu6.7, 2:9.1.2141-1ubuntu4.5 18.05.2026 SB2026051807
SB20260619120
SB2026062488
and 3 more
#VU131625 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-47162
CWE-94 Medium
No
No
2:7.4.052-1ubuntu3.1+esm29, 2:7.4.1689-3ubuntu1.5+esm35, 2:8.0.1453-1ubuntu1.13+esm20, 2:8.1.2269-1ubuntu5.32+esm8, 2:8.2.3995-1ubuntu2.32, 2:9.1.0016-1ubuntu7.16, 2:9.1.0967-1ubuntu6.7, 2:9.1.2141-1ubuntu4.5 18.05.2026 SB2026051806
SB20260619120
SB2026062488
and 4 more
#VU131545 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-43961
CWE-94 Medium
No
No
2:7.4.052-1ubuntu3.1+esm28, 2:7.4.1689-3ubuntu1.5+esm34, 2:8.0.1453-1ubuntu1.13+esm19, 2:8.1.2269-1ubuntu5.32+esm7, 2:8.2.3995-1ubuntu2.31, 2:9.1.0016-1ubuntu7.15, 2:9.1.0967-1ubuntu6.6, 2:9.1.2141-1ubuntu4.3 15.05.2026 SB2026051518
SB20260529238
SB2026053001
and 8 more
#VU131544 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-46483
CWE-78 Low
No
No
2:7.4.052-1ubuntu3.1+esm28, 2:7.4.1689-3ubuntu1.5+esm34, 2:8.0.1453-1ubuntu1.13+esm19, 2:8.1.2269-1ubuntu5.32+esm7, 2:8.2.3995-1ubuntu2.31, 2:9.1.0016-1ubuntu7.15, 2:9.1.0967-1ubuntu6.6, 2:9.1.2141-1ubuntu4.3 15.05.2026 SB2026051517
SB2026052130
SB2026052523
and 20 more
#VU129539 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-44656
CWE-78 Medium
No
No
2:7.4.052-1ubuntu3.1+esm26, 2:7.4.1689-3ubuntu1.5+esm32, 2:8.0.1453-1ubuntu1.13+esm17, 2:8.1.2269-1ubuntu5.32+esm5, 2:8.2.3995-1ubuntu2.30, 2:9.1.0016-1ubuntu7.14, 2:9.1.0967-1ubuntu6.5, 2:9.1.2141-1ubuntu4.2 04.05.2026 SB2026050476
SB2026052760
SB2026052762
and 9 more
#VU126891 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-42307
CWE-78 Medium
No
No
2:7.4.052-1ubuntu3.1+esm26, 2:7.4.1689-3ubuntu1.5+esm32, 2:8.0.1453-1ubuntu1.13+esm17, 2:8.1.2269-1ubuntu5.32+esm5, 2:8.2.3995-1ubuntu2.30, 2:9.1.0016-1ubuntu7.14, 2:9.1.0967-1ubuntu6.5, 2:9.1.2141-1ubuntu4.2 23.04.2026 SB2026042335
SB2026052760
SB2026052762
and 9 more


Showing elements 1 - 20 out of 203