Neovim
5 CVEs across 1 Neovim products. Browse Neovim vulnerabilities, severities, and proof-of-concept exploits.
Neovim products with known CVEs
Neovim CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-45130 | Medium | 6.6 | 2026-05-08 | Vim is an open source, command line text editor. Prior to version 9.2.0450, a heap buffer overflow exists in read_compound() in src/spellfile.c when loading a… |
CVE-2026-25749 | Medium | 6.6 | 2026-02-06 | Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when… |
CVE-2025-22134 | Medium | 4.2 | 2025-01-13 | When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does not properly… |
CVE-2024-43374 | Medium | 4.5 | 2024-08-16 | The UNIX editor Vim prior to version 9.1.0678 has a use-after-free error in argument list handling. When adding a new file to the argument list, this triggers… |
CVE-2021-4019 | High | 7.8 | 2021-12-01 | vim is vulnerable to Heap-based Buffer Overflow |
CVE-2019-12735 | High | 8.6 | 2019-06-05 | getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as de… |