{"schemaVersion":3,"id":"USN-8213-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"vim vulnerabilities\n\nMichał Majchrowicz discovered that Vim's zip plugin could overwrite\narbitrary files. An attacker could possibly use this issue to delete\nsensitive data or execute arbitrary code. This issue only affected\nUbuntu 24.04 LTS and Ubuntu 25.10. (CVE-2026-35177)\n\nIt was discovered that Vim's netbeans interface did not properly\nsanitize certain strings. An attacker could possibly use this issue to\nexecute arbitrary commands. (CVE-2026-39881)","dates":{"published":"2026-04-27T20:30:52.000Z","modified":"2026-06-25T13:32:32.080Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"vim","name":"vim","label":"vim","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/vim","purlType":"deb","versions":[{"text":"< 2:7.4.052-1ubuntu3.1+esm25","noFixRecorded":false,"fixedIn":null},{"text":"< 2:7.4.1689-3ubuntu1.5+esm31","noFixRecorded":false,"fixedIn":null},{"text":"< 2:8.0.1453-1ubuntu1.13+esm16","noFixRecorded":false,"fixedIn":null},{"text":"< 2:8.1.2269-1ubuntu5.32+esm4","noFixRecorded":false,"fixedIn":null},{"text":"< 2:8.2.3995-1ubuntu2.28","noFixRecorded":false,"fixedIn":null},{"text":"< 2:9.1.0016-1ubuntu7.12","noFixRecorded":false,"fixedIn":null},{"text":"< 2:9.1.0967-1ubuntu6.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2:7.4.052-1ubuntu3.1+esm25 | < 2:7.4.1689-3ubuntu1.5+esm31 | < 2:8.0.1453-1ubuntu1.13+esm16 | < 2:8.1.2269-1ubuntu5.32+esm4 | < 2:8.2.3995-1ubuntu2.28 | < 2:9.1.0016-1ubuntu7.12 | < 2:9.1.0967-1ubuntu6.3","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-8213-1","label":"ubuntu.com/security/notices/USN-8213-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-35177","label":"ubuntu.com/security/CVE-2026-35177","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-39881","label":"ubuntu.com/security/CVE-2026-39881","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CVE-2026-35177","CVE-2026-39881"]},"timeline":[{"kind":"published","date":"2026-04-27T20:30:52.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-25T13:32:32.080Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T01:15:47.324Z","stale":false,"partial":false}}