Msrc Cbl2 Vim 9.1.0791-4 On Cbl Mariner 2.0 vulnerabilities

CVE-2025-27423 [HIGH] CWE-77 Improper Input Validation in Vim Improper Input Validation in Vim FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed t

CVE-2025-29768 [MEDIUM] CWE-88 Vim vulnerable to potential data loss with zip.vim and special crafted zip files Vim vulnerable to potential data loss with zip.vim and special crafted zip files FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure

CVE-2025-26603 [MEDIUM] CWE-416 heap-use-after-free in function str_to_reg in vim/vim heap-use-after-free in function str_to_reg in vim/vim FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the

CVE-2025-1215 [LOW] CWE-119 vim main.c memory corruption vim main.c memory corruption FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transpa

CVE-2024-43802 [MEDIUM] CWE-122 heap-buffer-overflow in ins_typebuf() in Vim < 9.1.0697 heap-buffer-overflow in ins_typebuf() in Vim Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is co