CVE-2026-73078 | | | 2026-08-11 | Vim is an open source, command line text editor. Prior to 9.2.0840, runtime/plugin/netrwPlugin.vim loads netrw and runtime/pack/dist/opt/netrw/autoload/netrw.v… |
CVE-2026-73077 | | | 2026-08-11 | Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetyp… |
CVE-2026-73076 | | | 2026-08-11 | Vim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named .VimballRecord to overwr… |
CVE-2026-73075 | | | 2026-08-11 | Vim is an open source, command line text editor. From 9.2.0469 until 9.2.0843, popup_mark_opacity_zindex() in src/popupwin.c can use a negative w_winrow for a… |
CVE-2026-73074 | | | 2026-08-11 | Vim is an open source, command line text editor. Prior to 9.2.0841, prop_add_one() in src/textprop.c uses the proplen value from get_text_props() to increment… |
CVE-2026-73072 | | | 2026-08-11 | Vim is an open source, command line text editor. Prior to 9.2.0846, set_sofo() in src/spellfile.c reuses sl_sal_first[] without resetting values left by set_sa… |
CVE-2026-73071 | Low | 3.3 | 2026-08-11 | Vim is an open source, command line text editor. From 9.2.0511 until 9.2.0844, json_decode_item() in src/json.c can retain a stale pointer after json_decode_st… |
CVE-2026-73070 | | | 2026-08-11 | Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c accepts unbounded client connections in soc… |
CVE-2026-59858 | High | 7.8 | 2026-07-09 | Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim interpolates the typeref: or… |
CVE-2026-59857 | Medium | 5.5 | 2026-07-09 | Vim is an open source, command line text editor. Prior to 9.2.0725, the single-byte branch of spell_soundfold_sal() in src/spell.c translates a word through a… |
CVE-2026-59856 | High | 7.8 | 2026-07-09 | Vim is an open source, command line text editor. Prior to 9.2.0736, the PHP omni-completion script in runtime/autoload/phpcomplete.vim interpolates a class or… |
CVE-2026-57456 | High | 7.8 | 2026-06-25 | Vim is an open source, command line text editor. Prior to 9.2.0699, Vim's Python omni-completion (runtime/autoload/python3complete.vim and the legacy pythoncom… |
CVE-2026-57455 | High | 7.8 | 2026-06-25 | Vim is an open source, command line text editor. Prior to 9.2.0698, the single-byte branch of spell_soundfold_sofo() in src/spell.c translates a word through a… |
CVE-2026-57454 | Medium | 6.1 | 2026-06-25 | Vim is an open source, command line text editor. From 9.2.0320 until 9.2.0679, a crafted undo or swap file can store a virtual-text property whose offset and l… |
CVE-2026-57453 | Medium | 6.5 | 2026-06-25 | Vim is an open source, command line text editor. From 9.1.1784 until 9.2.0678, when the bundled zip plugin autoload/zip.vim falls back to PowerShell to browse… |
CVE-2026-57452 | Medium | 5.5 | 2026-06-25 | Vim is an open source, command line text editor. Prior to 9.2.0671, when Vim opens a file encrypted with the VimCrypt~04! or VimCrypt~05!
method (xchacha20poly… |
CVE-2026-57451 | Medium | 5.3 | 2026-06-25 | Vim is an open source, command line text editor. Prior to 9.2.0670, get_text_props() in src/textprop.c reads a uint16 property count stored inline after a line… |
CVE-2026-55895 | High | 7.8 | 2026-06-25 | Vim is an open source, command line text editor. Prior to 9.2.0663, a Vimscript code injection vulnerability exists in s:NetrwLocalRmFile() in the netrw plugin… |
CVE-2026-55892 | Medium | 5.5 | 2026-06-25 | Vim is an open source, command line text editor. Prior to 9.2.0662, the dump_prefixes() function in src/spell.c walks a spell-file prefix trie iteratively with… |
CVE-2026-55693 | High | 7.8 | 2026-06-25 | Vim is an open source, command line text editor. Prior to 9.2.0653, the tree_count_words() function in src/spellfile.c fills in the word-count fields of a spel… |
CVE-2026-52860 | High | 7.8 | 2026-06-11 | Vim is an open source, command line text editor. Prior to version 9.2.0597, Vim's Python omni-completion executes reconstructed function and class definitions… |
CVE-2026-52859 | High | 8.2 | 2026-06-11 | Vim is an open source, command line text editor. Prior to version 9.2.0565, the update_snapshot() function in src/terminal.c copies the visible terminal screen… |
CVE-2026-52858 | High | 7.8 | 2026-06-11 | Vim is an open source, command line text editor. Prior to version 9.2.0561, the Python omni-completion script in python3complete.vim for Vim with the +python3… |
CVE-2026-47167 | Medium | 5.3 | 2026-06-11 | Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch() in the cucumber filetype plu… |
CVE-2026-47162 | High | 8.8 | 2026-06-11 | Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave() in the net… |
CVE-2026-46483 | Low | 3.6 | 2026-05-15 | Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tar#Vimuntar() in
runtime/autoload/tar.vim when… |
CVE-2026-45130 | Medium | 6.6 | 2026-05-08 | Vim is an open source, command line text editor. Prior to version 9.2.0450, a heap buffer overflow exists in read_compound() in src/spellfile.c when loading a… |
CVE-2026-44656 | Medium | 5.3 | 2026-05-08 | Vim is an open source, command line text editor. Prior to version 9.2.0435, an OS command injection vulnerability exists in Vim's :find command-line completion… |
CVE-2026-42307 | Medium | 4.4 | 2026-05-08 | Vim is an open source, command line text editor. Prior to version 9.2.0383, an OS command injection vulnerability exists in the netrw standard plugin bundled w… |
CVE-2026-41411 | Medium | 6.6 | 2026-04-24 | Vim is an open source, command line text editor. Prior to 9.2.0357, A command injection vulnerability exists in Vim's tag file processing. When resolving a tag… |
CVE-2026-39881 | Medium | 5.0 | 2026-04-08 | Vim is an open source, command line text editor. Prior to 9.2.0316, a command injection vulnerability in Vim's netbeans interface allows a malicious netbeans s… |
CVE-2026-35177 | Medium | 4.1 | 2026-04-06 | Vim is an open source, command line text editor. Prior to 9.2.0280, a path traversal bypass in Vim's zip.vim plugin allows overwriting of arbitrary files when… |
CVE-2026-34982 | High | 8.2 | 2026-04-06 | Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command execution when a user… |
CVE-2026-34714 | Critical | 9.2 | 2026-03-30 | Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} injection occurs w… |
CVE-2026-33412 | Medium | 5.6 | 2026-03-24 | Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob() function on Unix-like syst… |
CVE-2026-32249 | Medium | 5.3 | 2026-03-12 | Vim is an open source, command line text editor. From 9.1.0011 to before 9.2.0137, Vim's NFA regex compiler, when encountering a collection containing a combin… |
CVE-2026-28422 | Low | 2.2 | 2026-02-27 | Vim is an open source, command line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in `build_stl_str_hl()` when rendering a statusline… |
CVE-2026-28421 | Medium | 5.3 | 2026-02-27 | Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault (SEGV) exist in Vim's swap fil… |
CVE-2026-28420 | Medium | 4.4 | 2026-02-27 | Vim is an open source, command line text editor. Prior to version 9.2.0076, a heap-based buffer overflow WRITE and an out-of-bounds READ exist in Vim's termina… |
CVE-2026-28419 | Medium | 5.3 | 2026-02-27 | Vim is an open source, command line text editor. Prior to version 9.2.0075, a heap-based buffer underflow exists in Vim's Emacs-style tags file parsing logic… |
CVE-2026-28418 | Medium | 4.4 | 2026-02-27 | Vim is an open source, command line text editor. Prior to version 9.2.0074, a heap-based buffer overflow out-of-bounds read exists in Vim's Emacs-style tags fi… |
CVE-2026-28417 | Medium | 4.4 | 2026-02-27 | Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the `netrw` standard plugin bundled… |
CVE-2026-26269 | Medium | 5.4 | 2026-02-13 | Vim is an open source, command line text editor. Prior to 9.1.2148, a stack buffer overflow vulnerability exists in Vim's NetBeans integration when processing… |
CVE-2026-25749 | Medium | 6.6 | 2026-02-06 | Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when… |
CVE-2025-66476 | High | 7.8 | 2025-12-02 | Vim is an open source, command line text editor. Prior to version 9.1.1947, an uncontrolled search path vulnerability on Windows allows Vim to execute maliciou… |
CVE-2025-9390 | Medium | 5.3 | 2025-08-24 | A security flaw has been discovered in vim up to 9.1.1615. Affected by this vulnerability is the function main of the file src/xxd/xxd.c of the component xxd… |
CVE-2025-9389 | Low | 3.3 | 2025-08-24 | A vulnerability was identified in vim 9.1.0000. Affected is the function __memmove_avx_unaligned_erms of the file memmove-vec-unaligned-erms.S. The manipulatio… |
CVE-2025-55158 | High | 8.8 | 2025-08-11 | Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1406, when processing nested tuples during Vim9 script import operatio… |
CVE-2025-55157 | High | 8.8 | 2025-08-11 | Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1400, When processing nested tuples in Vim script, an error during eva… |
CVE-2025-53906 | Medium | 4.1 | 2025-07-15 | Vim is an open source, command line text editor. Prior to version 9.1.1551, a path traversal issue in Vim’s zip.vim plugin can allow overwriting of arbitrary f… |
CVE-2025-53905 | Medium | 4.1 | 2025-07-15 | Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in Vim’s tar.vim plugin can allow overwriting of arbitrary f… |
CVE-2025-29768 | Medium | 4.4 | 2025-03-13 | Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because… |
CVE-2025-27423 | High | 7.1 | 2025-03-03 | Vim is an open source, command line text editor. Vim is distributed with the tar.vim plugin, that allows easy editing and viewing of (compressed or uncompresse… |
CVE-2025-26603 | Medium | 4.2 | 2025-02-18 | Vim is a greatly improved version of the good old UNIX editor Vi. Vim allows to redirect screen messages using the `:redir` ex command to register, variables a… |
CVE-2025-1215 | Low | 2.8 | 2025-02-12 | A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of… |
CVE-2025-24014 | Medium | 4.2 | 2025-01-20 | Vim is an open source, command line text editor. A segmentation fault was found in Vim before 9.1.1043. In silent Ex mode (-s -e), Vim typically doesn't show a… |
CVE-2025-22134 | Medium | 4.2 | 2025-01-13 | When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does not properly… |
CVE-2024-47814 | Low | 3.9 | 2024-10-07 | Vim is an open source, command line text editor. A use-after-free was found in Vim < 9.1.0764. When closing a buffer (visible in a window) a BufWinLeave auto c… |
CVE-2024-45306 | Medium | 4.5 | 2024-09-02 | Vim is an open source, command line text editor. Patch v9.1.0038 optimized how the cursor position is calculated and removed a loop, that verified that the cur… |
CVE-2024-43802 | Medium | 4.5 | 2024-08-26 | Vim is an improved version of the unix vi text editor. When flushing the typeahead buffer, Vim moves the current position in the typeahead buffer but does not… |
CVE-2024-43790 | Medium | 4.5 | 2024-08-22 | Vim is an open source command line text editor. When performing a search and displaying the search-count message is disabled (:set shm+=S), the search pattern… |
CVE-2024-43374 | Medium | 4.5 | 2024-08-16 | The UNIX editor Vim prior to version 9.1.0678 has a use-after-free error in argument list handling. When adding a new file to the argument list, this triggers… |
CVE-2024-41965 | Medium | 4.2 | 2024-08-01 | Vim is an open source command line text editor. double-free in dialog_changed() in Vim < v9.1.0648. When abandoning a buffer, Vim may ask the user what to do w… |
CVE-2024-41957 | Medium | 4.5 | 2024-08-01 | Vim is an open source command line text editor. Vim < v9.1.0647 has double free in src/alloc.c:616. When closing a window, the corresponding tagstack data will… |
CVE-2024-22667 | High | 7.8 | 2024-02-05 | Vim before 9.0.2142 has a stack-based buffer overflow because did_set_langmap in map.c calls sprintf to write to the error buffer that is passed down to the op… |
CVE-2023-48706 | Low | 3.6 | 2023-11-22 | Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability. When executing a `:s` command for the very first time and using… |
CVE-2023-48237 | Low | 2.8 | 2023-11-16 | Vim is an open source command line text editor. In affected versions when shifting lines in operator pending mode and using a very large value, it may be possi… |
CVE-2023-48236 | Low | 2.8 | 2023-11-16 | Vim is an open source command line text editor. When using the z= command, the user may overflow the count with values larger
than MAX_INT. Impact is low, user… |
CVE-2023-48235 | Low | 2.8 | 2023-11-16 | Vim is an open source command line text editor. When parsing relative ex addresses one may unintentionally cause an
overflow. Ironically this happens in the ex… |
CVE-2023-48234 | Low | 2.8 | 2023-11-16 | Vim is an open source command line text editor. When getting the count for a normal mode z command, it may overflow for large counts given. Impact is low, user… |
CVE-2023-48233 | Low | 2.8 | 2023-11-16 | Vim is an open source command line text editor. If the count after the :s command is larger than what fits into a (signed) long variable, abort with e_value_to… |
CVE-2023-48232 | Low | 3.9 | 2023-11-16 | Vim is an open source command line text editor. A floating point exception may occur when calculating the line offset for overlong lines and smooth scrolling i… |
CVE-2023-48231 | Low | 3.9 | 2023-11-16 | Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the a… |
CVE-2023-46246 | Medium | 4.0 | 2023-10-27 | Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function `ga_grow_inner` in in the file `src/alloc.c`… |
CVE-2023-5535 | High | 7.8 | 2023-10-11 | Use After Free in GitHub repository vim/vim prior to v9.0.2010. |
CVE-2023-5441 | Medium | 5.5 | 2023-10-05 | NULL Pointer Dereference in GitHub repository vim/vim prior to 20d161ace307e28690229b68584f2d84556f8960. |
CVE-2023-5344 | High | 7.5 | 2023-10-02 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969. |
CVE-2023-4781 | High | 7.8 | 2023-09-05 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873. |
CVE-2023-4752 | High | 7.8 | 2023-09-04 | Use After Free in GitHub repository vim/vim prior to 9.0.1858. |
CVE-2023-4750 | High | 7.8 | 2023-09-04 | Use After Free in GitHub repository vim/vim prior to 9.0.1857. |
CVE-2023-4733 | High | 7.8 | 2023-09-04 | Use After Free in GitHub repository vim/vim prior to 9.0.1840. |
CVE-2023-4751 | High | 7.8 | 2023-09-03 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331. |
CVE-2023-4738 | High | 7.8 | 2023-09-02 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848. |
CVE-2023-4736 | High | 7.8 | 2023-09-02 | Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833. |
CVE-2023-4735 | High | 7.8 | 2023-09-02 | Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847. |
CVE-2023-4734 | High | 7.8 | 2023-09-02 | Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846. |
CVE-2021-3236 | Medium | 5.5 | 2023-08-11 | vim 8.2.2348 is affected by null pointer dereference, allows local attackers to cause a denial of service (DoS) via the ex_buffer_all method. |
CVE-2023-3896 | High | 7.8 | 2023-08-07 | Divide By Zero in vim/vim from 9.0.1367-1 to 9.0.1367-3 |
CVE-2020-20703 | Critical | 9.8 | 2023-06-20 | Buffer Overflow vulnerability in VIM v.8.1.2135 allows a remote attacker to execute arbitrary code via the operand parameter. |
CVE-2023-2610 | High | 7.8 | 2023-05-09 | Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1532. |
CVE-2023-2609 | Medium | 5.5 | 2023-05-09 | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1531. |
CVE-2023-2426 | Medium | 5.5 | 2023-04-29 | Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499. |
CVE-2023-1355 | Medium | 5.5 | 2023-03-11 | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1402. |
CVE-2023-1264 | Medium | 5.5 | 2023-03-07 | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392. |
CVE-2023-1175 | Medium | 6.6 | 2023-03-04 | Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378. |
CVE-2023-1170 | Medium | 6.6 | 2023-03-03 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376. |
CVE-2023-1127 | High | 7.8 | 2023-03-01 | Divide By Zero in GitHub repository vim/vim prior to 9.0.1367. |
CVE-2023-0512 | High | 7.8 | 2023-01-30 | Divide By Zero in GitHub repository vim/vim prior to 9.0.1247. |
CVE-2023-0433 | High | 7.8 | 2023-01-21 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225. |
CVE-2022-47024 | High | 7.8 | 2023-01-20 | A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause den… |