CVE-2026-45130 | Medium | 6.6 | 2026-05-08 | Vim is an open source, command line text editor. Prior to version 9.2.0450, a heap buffer overflow exists in read_compound() in src/spellfile.c when loading a… |
CVE-2026-25749 | Medium | 6.6 | 2026-02-06 | Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when… |
CVE-2025-22134 | Medium | 4.2 | 2025-01-13 | When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does not properly… |
CVE-2024-43374 | Medium | 4.5 | 2024-08-16 | The UNIX editor Vim prior to version 9.1.0678 has a use-after-free error in argument list handling. When adding a new file to the argument list, this triggers… |
CVE-2024-41965 | Medium | 4.2 | 2024-08-01 | Vim is an open source command line text editor. double-free in dialog_changed() in Vim < v9.1.0648. When abandoning a buffer, Vim may ask the user what to do w… |
CVE-2023-48706 | Low | 3.6 | 2023-11-22 | Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability. When executing a `:s` command for the very first time and using… |
CVE-2023-5535 | High | 7.8 | 2023-10-11 | Use After Free in GitHub repository vim/vim prior to v9.0.2010. |
CVE-2023-4781 | High | 7.8 | 2023-09-05 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873. |
CVE-2023-4752 | High | 7.8 | 2023-09-04 | Use After Free in GitHub repository vim/vim prior to 9.0.1858. |
CVE-2023-4750 | High | 7.8 | 2023-09-04 | Use After Free in GitHub repository vim/vim prior to 9.0.1857. |
CVE-2023-4733 | High | 7.8 | 2023-09-04 | Use After Free in GitHub repository vim/vim prior to 9.0.1840. |
CVE-2023-4751 | High | 7.8 | 2023-09-03 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331. |
CVE-2023-4738 | High | 7.8 | 2023-09-02 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848. |
CVE-2023-4734 | High | 7.8 | 2023-09-02 | Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846. |
CVE-2023-2426 | Medium | 5.3 | 2023-04-29 | Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499. |
CVE-2023-1175 | Medium | 6.6 | 2023-03-04 | Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378. |
CVE-2023-1170 | Medium | 6.6 | 2023-03-03 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376. |
CVE-2023-0433 | High | 7.8 | 2023-01-21 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225. |
CVE-2023-0288 | High | 7.8 | 2023-01-13 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189. |
CVE-2023-0049 | High | 7.8 | 2023-01-04 | Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143. |
CVE-2022-3591 | High | 7.8 | 2022-12-02 | Use After Free in GitHub repository vim/vim prior to 9.0.0789. |
CVE-2022-4141 | High | 7.8 | 2022-11-25 | Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command. |
CVE-2022-3324 | High | 7.8 | 2022-09-27 | Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598. |
CVE-2022-3297 | High | 7.8 | 2022-09-25 | Use After Free in GitHub repository vim/vim prior to 9.0.0579. |
CVE-2022-3296 | High | 7.8 | 2022-09-25 | Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0577. |
CVE-2022-3256 | High | 7.8 | 2022-09-22 | Use After Free in GitHub repository vim/vim prior to 9.0.0530. |
CVE-2022-3134 | High | 7.8 | 2022-09-06 | Use After Free in GitHub repository vim/vim prior to 9.0.0389. |
CVE-2022-3037 | High | 7.8 | 2022-08-30 | Use After Free in GitHub repository vim/vim prior to 9.0.0322. |
CVE-2021-4019 | High | 7.8 | 2021-12-01 | vim is vulnerable to Heap-based Buffer Overflow |
CVE-2019-12735 | High | 8.6 | 2019-06-05 | getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as de… |