{"schemaVersion":3,"id":"USN-7748-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"vim vulnerabilities\n\nIt was discovered that Vim incorrectly handled file extraction when opening\nmaliciously crafted zip or tar archives. An attacker could possibly use\nthis issue to create or overwrite files on the system and execute arbitrary\ncode.","dates":{"published":"2025-09-15T13:18:35.000Z","modified":"2026-02-10T04:49:48.000Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"vim","name":"vim","label":"vim","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/vim","purlType":"deb","versions":[{"text":"< 2:9.1.0016-1ubuntu7.9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2:9.1.0016-1ubuntu7.9","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-7748-1","label":"ubuntu.com/security/notices/USN-7748-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-53905","label":"ubuntu.com/security/CVE-2025-53905","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-53906","label":"ubuntu.com/security/CVE-2025-53906","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2025-53905","CVE-2025-53906"],"downstream":[],"duplicates":[],"related":["CVE-2025-53905","CVE-2025-53906"]},"timeline":[{"kind":"published","date":"2025-09-15T13:18:35.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-10T04:49:48.000Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T19:11:13.879Z","stale":false,"partial":false}}