Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim patch v9.1.1198.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade vim | Aug 8, 2025 | Mar 13, 2025 |
| Amazon Linux Ami 2 | — | Upgrade vim-filesystemUpgrade vim-X11Upgrade vim-debuginfoUpgrade xxdUpgrade vim-enhancedUpgrade vim-commonUpgrade vim-dataUpgrade vim-minimal | Apr 17, 2025 | Mar 13, 2025 |
| Amazon_linux_2023 | — | Upgrade xxd-debuginfoUpgrade vim-minimalUpgrade xxdUpgrade vim-enhanced-debuginfoUpgrade vim-minimal-debuginfoUpgrade vim-dataUpgrade vim-debugsourceUpgrade vim-commonUpgrade vim-default-editorUpgrade vim-enhancedUpgrade vim-filesystemUpgrade vim-debuginfo | Apr 15, 2025 | Mar 13, 2025 |
| Debian | — | Upgrade vim | May 15, 2025 | Mar 13, 2025 |
| Dell Powerstore Dsa2025429 | — | Upgrade Dell PowerStoreOS to the latest version | Dec 3, 2025 | Dec 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Freebsd | — | Upgrade vim | Mar 14, 2025 | Mar 12, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade vim-minimalUpgrade vim-commonUpgrade vim-enhancedUpgrade vim-filesystem | Jul 11, 2025 | Mar 13, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade vim-enhancedUpgrade vim-minimalUpgrade vim-filesystemUpgrade vim-common | Jun 13, 2025 | Mar 13, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade vim-filesystemUpgrade vim-enhancedUpgrade vim-commonUpgrade vim-minimal | Jun 11, 2025 | Mar 13, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade vim-enhancedUpgrade vim-minimalUpgrade vim-commonUpgrade vim-filesystem | Jul 1, 2025 | Mar 13, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 13, 2025 |
| Suse | — | Upgrade vim-data-commonUpgrade vim-smallUpgrade gvimUpgrade vim-dataUpgrade vimUpgrade xxd | Dec 5, 2025 | Jul 4, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Mar 13, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub