Known vulnerabilities in vim (Ubuntu package) - page 2

Software CPE: cpe:2.3:o:canonical:vim_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 203
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting vim (Ubuntu package) vim (Ubuntu package) is affected by 203 known vulnerabilities: 97 high, 35 medium, 71 low Critical High Medium Low

Vulnerabilities (203)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU130925 - Heap-based Buffer Overflow
CVE-2026-45130
CWE-122 Medium
No
No
2:7.4.052-1ubuntu3.1+esm26, 2:7.4.1689-3ubuntu1.5+esm32, 2:8.0.1453-1ubuntu1.13+esm17, 2:8.1.2269-1ubuntu5.32+esm5, 2:8.2.3995-1ubuntu2.30, 2:9.1.0016-1ubuntu7.14, 2:9.1.0967-1ubuntu6.5, 2:9.1.2141-1ubuntu4.2 11.05.2026 SB2026051150
SB2026052726
SB2026052760
and 10 more
#VU126870 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-41411
CWE-78 Medium
No
No
2:7.4.052-1ubuntu3.1+esm27, 2:7.4.1689-3ubuntu1.5+esm33, 2:8.0.1453-1ubuntu1.13+esm18, 2:8.1.2269-1ubuntu5.32+esm6, 2:8.2.3995-1ubuntu2.29, 2:9.1.0016-1ubuntu7.13, 2:9.1.0967-1ubuntu6.4, 2:9.1.2141-1ubuntu4.1 22.04.2026 SB20260422223
SB2026050840
SB20260509158
and 16 more
#VU125101 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-39881
CWE-78 Medium
No
No
2:7.4.052-1ubuntu3.1+esm25, 2:7.4.1689-3ubuntu1.5+esm31, 2:8.0.1453-1ubuntu1.13+esm16, 2:8.1.2269-1ubuntu5.32+esm4, 2:8.2.3995-1ubuntu2.28, 2:8.2.3995-1ubuntu2.29, 2:9.1.0016-1ubuntu7.12, 2:9.1.0016-1ubuntu7.13, 2:9.1.0967-1ubuntu6.3, 2:9.1.0967-1ubuntu6.4, 2:9.1.2141-1ubuntu4.1 08.04.2026 SB2026040828
SB2026041567
SB2026042494
and 9 more
#VU125037 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-34982
CWE-78 High
No
No
2:7.4.052-1ubuntu3.1+esm24, 2:7.4.1689-3ubuntu1.5+esm30, 2:8.0.1453-1ubuntu1.13+esm15, 2:8.1.2269-1ubuntu5.32+esm3, 2:8.2.3995-1ubuntu2.27, 2:9.1.0016-1ubuntu7.11, 2:9.1.0967-1ubuntu6.2 07.04.2026 SB2026040792
SB2026041439
SB20260417153
and 13 more
#VU125036 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-35177
CWE-22 Medium
No
No
2:7.4.052-1ubuntu3.1+esm25, 2:7.4.052-1ubuntu3.1+esm30, 2:7.4.1689-3ubuntu1.5+esm31, 2:7.4.1689-3ubuntu1.5+esm36, 2:8.0.1453-1ubuntu1.13+esm16, 2:8.0.1453-1ubuntu1.13+esm21, 2:8.1.2269-1ubuntu5.32+esm4, 2:8.1.2269-1ubuntu5.32+esm9, 2:8.2.3995-1ubuntu2.28, 2:8.2.3995-1ubuntu2.29, 2:8.2.3995-1ubuntu2.33, 2:9.1.0016-1ubuntu7.12, 2:9.1.0016-1ubuntu7.13, 2:9.1.0016-1ubuntu7.17, 2:9.1.0967-1ubuntu6.3, 2:9.1.0967-1ubuntu6.4, 2:9.1.0967-1ubuntu6.8, 2:9.1.2141-1ubuntu4.1, 2:9.1.2141-1ubuntu4.6 07.04.2026 SB2026040793
SB2026042846
SB2026050311
and 10 more
#VU124677 - NULL Pointer Dereference
CVE-2026-32249
CWE-476 Low
No
No
2:7.4.052-1ubuntu3.1+esm24, 2:7.4.1689-3ubuntu1.5+esm30, 2:8.0.1453-1ubuntu1.13+esm15, 2:8.1.2269-1ubuntu5.32+esm3, 2:8.2.3995-1ubuntu2.27, 2:9.1.0016-1ubuntu7.11, 2:9.1.0967-1ubuntu6.2 30.03.2026 SB2026033031
SB2026041439
#VU124153 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-33412
CWE-78 Medium
No
No
2:7.4.052-1ubuntu3.1+esm24, 2:7.4.1689-3ubuntu1.5+esm30, 2:8.0.1453-1ubuntu1.13+esm15, 2:8.1.2269-1ubuntu5.32+esm3, 2:8.2.3995-1ubuntu2.27, 2:9.1.0016-1ubuntu7.11, 2:9.1.0967-1ubuntu6.2 20.03.2026 SB2026032022
SB20260325108
SB20260325109
and 23 more
#VU123428 - Stack-based buffer overflow
CVE-2026-28422
CWE-121 High
No
No
2:7.4.052-1ubuntu3.1+esm23, 2:7.4.1689-3ubuntu1.5+esm29, 2:8.0.1453-1ubuntu1.13+esm14, 2:8.1.2269-1ubuntu5.32+esm2, 2:8.2.3995-1ubuntu2.26, 2:9.1.0016-1ubuntu7.10, 2:9.1.0967-1ubuntu6.1 03.03.2026 SB2026030330
SB2026030546
SB2026030620
and 9 more
#VU123427 - Heap-based Buffer Overflow
CVE-2026-28421
CWE-122 High
No
No
2:7.4.052-1ubuntu3.1+esm23, 2:7.4.1689-3ubuntu1.5+esm29, 2:8.0.1453-1ubuntu1.13+esm14, 2:8.1.2269-1ubuntu5.32+esm2, 2:8.2.3995-1ubuntu2.26, 2:9.1.0016-1ubuntu7.10, 2:9.1.0967-1ubuntu6.1 03.03.2026 SB2026030329
SB2026030546
SB2026030620
and 25 more
#VU123426 - Heap-based Buffer Overflow
CVE-2026-28420
CWE-122 Medium
No
No
2:7.4.052-1ubuntu3.1+esm23, 2:7.4.1689-3ubuntu1.5+esm29, 2:8.0.1453-1ubuntu1.13+esm14, 2:8.1.2269-1ubuntu5.32+esm2, 2:8.2.3995-1ubuntu2.26, 2:9.1.0016-1ubuntu7.10, 2:9.1.0967-1ubuntu6.1 03.03.2026 SB2026030326
SB2026030546
SB2026030620
and 9 more
#VU123425 - Heap-based Buffer Overflow
CVE-2026-28419
CWE-122 High
No
No
2:7.4.052-1ubuntu3.1+esm23, 2:7.4.1689-3ubuntu1.5+esm29, 2:8.0.1453-1ubuntu1.13+esm14, 2:8.1.2269-1ubuntu5.32+esm2, 2:8.2.3995-1ubuntu2.26, 2:9.1.0016-1ubuntu7.10, 2:9.1.0967-1ubuntu6.1 03.03.2026 SB2026030322
SB2026030546
SB2026030620
and 9 more
#VU123424 - Heap-based Buffer Overflow
CVE-2026-28418
CWE-122 High
No
No
2:7.4.052-1ubuntu3.1+esm23, 2:7.4.1689-3ubuntu1.5+esm29, 2:8.0.1453-1ubuntu1.13+esm14, 2:8.1.2269-1ubuntu5.32+esm2, 2:8.2.3995-1ubuntu2.26, 2:9.1.0016-1ubuntu7.10, 2:9.1.0967-1ubuntu6.1 03.03.2026 SB2026030318
SB2026030546
SB2026030620
and 9 more
#VU123423 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-28417
CWE-78 High
No
No
2:7.4.052-1ubuntu3.1+esm23, 2:7.4.1689-3ubuntu1.5+esm29, 2:8.0.1453-1ubuntu1.13+esm14, 2:8.1.2269-1ubuntu5.32+esm2, 2:8.2.3995-1ubuntu2.26, 2:9.1.0016-1ubuntu7.10, 2:9.1.0967-1ubuntu6.1 03.03.2026 SB2026030317
SB2026030620
SB2026030621
and 28 more
#VU122841 - Stack-based buffer overflow
CVE-2026-26269
CWE-121 Medium
No
No
2:7.4.052-1ubuntu3.1+esm23, 2:7.4.1689-3ubuntu1.5+esm29, 2:8.0.1453-1ubuntu1.13+esm14, 2:8.1.2269-1ubuntu5.32+esm2, 2:8.2.3995-1ubuntu2.26, 2:9.1.0016-1ubuntu7.10, 2:9.1.0967-1ubuntu6.1 16.02.2026 SB2026021613
SB2026022443
SB2026022444
and 11 more
#VU122421 - Heap-based Buffer Overflow
CVE-2026-25749
CWE-122 High
No
No
2:7.4.052-1ubuntu3.1+esm23, 2:7.4.1689-3ubuntu1.5+esm29, 2:8.0.1453-1ubuntu1.13+esm14, 2:8.1.2269-1ubuntu5.32+esm2, 2:8.2.3995-1ubuntu2.26, 2:9.1.0016-1ubuntu7.10, 2:9.1.0967-1ubuntu6.1 05.02.2026 SB2026020601
SB2026021309
SB2026021310
and 19 more
#VU112980 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-53905
CWE-22 High
No
No
2:9.1.0016-1ubuntu7.9, 2:9.1.0967-1ubuntu4.1 16.07.2025 SB2025071691
SB2025071770
SB2025071771
and 23 more
#VU112979 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-53906
CWE-22 High
No
No
2:9.1.0016-1ubuntu7.9, 2:9.1.0967-1ubuntu4.1 16.07.2025 SB2025071690
SB2025071770
SB2025071771
and 29 more
#VU103998 - Use After Free
CVE-2025-26603
CWE-416 High
No
No
Ubuntu Pro (Infra-only), 2:8.1.2269-1ubuntu5.32, 2:8.2.3995-1ubuntu2.24, 2:9.1.0016-1ubuntu7.8, 2:9.1.0496-1ubuntu6.5 17.02.2025 SB2025021706
SB2025022026
SB2025022027
and 6 more
#VU103997 - Memory corruption
CVE-2025-1215
CWE-119 Medium
No
No
Ubuntu Pro (Infra-only), 2:8.1.2269-1ubuntu5.32, 2:8.2.3995-1ubuntu2.24, 2:9.1.0016-1ubuntu7.8, 2:9.1.0496-1ubuntu6.5 17.02.2025 SB2025021704
SB20250226510
SB20250226511
and 7 more
#VU103117 - Out-of-bounds write
CVE-2025-24014
CWE-787 High
No
No
2:7.4.052-1ubuntu3.1+esm22, 2:7.4.1689-3ubuntu1.5+esm28, 2:8.0.1453-1ubuntu1.13+esm13, 2:8.1.2269-1ubuntu5.31, 2:8.2.3995-1ubuntu2.23, 2:9.1.0016-1ubuntu7.7, 2:9.1.0496-1ubuntu6.4 21.01.2025 SB2025012134
SB2025021060
SB2025021444
and 8 more


Showing elements 21 - 40 out of 203