The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8101-1 advisory.

    Rahul Hoysala discovered that Vim did not correctly handle certain tag resolutions. An attacker could     possibly use this issue to cause a denial of service. (CVE-2026-25749)

    It was discovered that Vim did not correctly handle processing certain specialKey commands. An attacker     could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-26269)

    Kim Dong Han discovered that Vim did not correctly handle opening certain URLs. If a user or system were     tricked into opening a specially crafted file, an attacker could possibly use this issue to execute     arbitrary code. (CVE-2026-28417)

    Kim Dong Han discovered that Vim did not correctly handle parsing Emacs-style tag files. An attacker could     possibly use this issue to cause a denial of service. (CVE-2026-28418, CVE-2026-28419)

    Kim Dong Han discovered that Vim did not correctly handle processing maximum combining characters from     Unicode supplementary planes. An attacker could possibly use this issue to cause a denial of service or     execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS,     Ubuntu 24.04 LTS and Ubuntu 25.10. (CVE-2026-28420)

    Kim Dong Han discovered that Vim did not correctly handle swap file recovery. An attacker could possibly     use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-28421)

    Kim Dong Han discovered that Vim did not correctly handle rendering status lines. An attacker could     possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-28422)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 : Vim vulnerabilities (USN-8101-1)

high Nessus Plugin ID 303027

Version 1.2

Version 1.1

Version 1.2 May 1, 2026, 7:22 AM IAVM reference Plugin Feed: 202605010722
Version 1.1 Mar 19, 2026, 6:55 PM New Plugin Feed: 202603191855