Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim patch v9.1.1198.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-vim | Aug 8, 2025 | Mar 13, 2025 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-vim-commonamazon-linux-ami-2-upgrade-vim-dataamazon-linux-ami-2-upgrade-vim-debuginfoamazon-linux-ami-2-upgrade-vim-enhancedamazon-linux-ami-2-upgrade-vim-filesystemamazon-linux-ami-2-upgrade-vim-minimalamazon-linux-ami-2-upgrade-vim-x11amazon-linux-ami-2-upgrade-xxd | Apr 17, 2025 | Mar 13, 2025 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-vim-commonamazon-linux-2023-upgrade-vim-dataamazon-linux-2023-upgrade-vim-debuginfoamazon-linux-2023-upgrade-vim-debugsourceamazon-linux-2023-upgrade-vim-default-editoramazon-linux-2023-upgrade-vim-enhancedamazon-linux-2023-upgrade-vim-enhanced-debuginfoamazon-linux-2023-upgrade-vim-filesystemamazon-linux-2023-upgrade-vim-minimalamazon-linux-2023-upgrade-vim-minimal-debuginfoamazon-linux-2023-upgrade-xxdamazon-linux-2023-upgrade-xxd-debuginfo | Apr 15, 2025 | Mar 13, 2025 | |
| Debian | no-fix-debian-deb-package | May 15, 2025 | Mar 13, 2025 | |
| Dell Powerstore Dsa2025429 | dell-powerstoreos-upgrade-latest | Dec 3, 2025 | Dec 2, 2025 | |
| Dell Powerstore Dsa2026039 | dell-powerstoreos-upgrade-latest | Jan 13, 2026 | Jan 6, 2026 | |
| Freebsd | freebsd-upgrade-package-vim | Mar 14, 2025 | Mar 12, 2025 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-vim-commonhuawei-euleros-2_0_sp10-upgrade-vim-enhancedhuawei-euleros-2_0_sp10-upgrade-vim-filesystemhuawei-euleros-2_0_sp10-upgrade-vim-minimal | Jul 11, 2025 | Mar 13, 2025 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-vim-commonhuawei-euleros-2_0_sp11-upgrade-vim-enhancedhuawei-euleros-2_0_sp11-upgrade-vim-filesystemhuawei-euleros-2_0_sp11-upgrade-vim-minimal | Jun 13, 2025 | Mar 13, 2025 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-vim-commonhuawei-euleros-2_0_sp12-upgrade-vim-enhancedhuawei-euleros-2_0_sp12-upgrade-vim-filesystemhuawei-euleros-2_0_sp12-upgrade-vim-minimal | Jun 11, 2025 | Mar 13, 2025 | |
| Huawei Euleros 2_0_sp13 | huawei-euleros-2_0_sp13-upgrade-vim-commonhuawei-euleros-2_0_sp13-upgrade-vim-enhancedhuawei-euleros-2_0_sp13-upgrade-vim-filesystemhuawei-euleros-2_0_sp13-upgrade-vim-minimal | Jul 1, 2025 | Mar 13, 2025 | |
| Redhat_linux | no-fix-redhat-rpm-package | Jul 9, 2025 | Mar 13, 2025 | |
| Suse | — | suse-upgrade-gvimsuse-upgrade-vimsuse-upgrade-vim-datasuse-upgrade-vim-data-commonsuse-upgrade-vim-smallsuse-upgrade-xxd | Dec 5, 2025 | Jul 4, 2025 |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jul 2, 2025 | Mar 13, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub