vim (Ubuntu:Pro:18.04:LTS) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Ubuntu:Pro:18.04:LTS package vim, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (5)

• CVE-2025-27423 — CVSS 7.1 (high): Vim is an open source, command line text editor. Vim is distributed with the tar.vim plugin, that allows easy editing and viewing of…
• CVE-2024-43790 — CVSS 4.5 (medium): Vim is an open source command line text editor. When performing a search and displaying the search-count message is disabled (:set shm+=S)…
• CVE-2024-45306 — CVSS 4.5 (medium): Vim is an open source, command line text editor. Patch v9.1.0038 optimized how the cursor position is calculated and removed a loop, that…
• CVE-2025-29768 — CVSS 4.4 (medium): Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The…
• CVE-2024-41965 — CVSS 4.2 (medium): Vim is an open source command line text editor. double-free in dialog_changed() in Vim < v9.1.0648. When abandoning a buffer, Vim may ask…