Vim
Page 3 of 3 — Vim CVEs from a corpus of 229, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-0554 | High | 7.8 | 2022-02-10 | Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2. |
CVE-2022-0443 | High | 7.8 | 2022-02-02 | Use After Free in GitHub repository vim/vim prior to 8.2. |
CVE-2022-0417 | High | 7.8 | 2022-02-01 | Heap-based Buffer Overflow GitHub repository vim/vim prior to 8.2. |
CVE-2022-0413 | High | 7.8 | 2022-01-30 | Use After Free in GitHub repository vim/vim prior to 8.2. |
CVE-2022-0408 | High | 7.8 | 2022-01-30 | Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. |
CVE-2022-0407 | High | 7.8 | 2022-01-30 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. |
CVE-2022-0393 | High | 7.1 | 2022-01-28 | Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. |
CVE-2022-0392 | High | 7.8 | 2022-01-28 | Heap-based Buffer Overflow in GitHub repository vim prior to 8.2. |
CVE-2022-0368 | High | 7.8 | 2022-01-26 | Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. |
CVE-2022-0361 | High | 7.8 | 2022-01-26 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. |
CVE-2022-0359 | High | 7.8 | 2022-01-26 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. |
CVE-2022-0351 | High | 7.8 | 2022-01-25 | Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2. |
CVE-2022-0319 | Medium | 5.5 | 2022-01-21 | Out-of-bounds Read in vim/vim prior to 8.2. |
CVE-2022-0318 | Critical | 9.8 | 2022-01-21 | Heap-based Buffer Overflow in vim/vim prior to 8.2. |
CVE-2022-0261 | High | 7.8 | 2022-01-18 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. |
CVE-2022-0213 | Medium | 6.6 | 2022-01-14 | vim is vulnerable to Heap-based Buffer Overflow |
CVE-2022-0158 | Low | 3.3 | 2022-01-10 | vim is vulnerable to Heap-based Buffer Overflow |
CVE-2022-0156 | Medium | 5.5 | 2022-01-10 | vim is vulnerable to Use After Free |
CVE-2022-0128 | High | 7.8 | 2022-01-06 | vim is vulnerable to Out-of-bounds Read |
CVE-2021-4193 | Medium | 5.5 | 2021-12-31 | vim is vulnerable to Out-of-bounds Read |
CVE-2021-4192 | High | 7.8 | 2021-12-31 | vim is vulnerable to Use After Free |
CVE-2021-4187 | High | 7.8 | 2021-12-29 | vim is vulnerable to Use After Free |
CVE-2021-4173 | High | 7.8 | 2021-12-27 | vim is vulnerable to Use After Free |
CVE-2021-4166 | High | 7.1 | 2021-12-25 | vim is vulnerable to Out-of-bounds Read |
CVE-2021-4136 | High | 7.8 | 2021-12-19 | vim is vulnerable to Heap-based Buffer Overflow |
CVE-2021-4069 | High | 7.8 | 2021-12-06 | vim is vulnerable to Use After Free |
CVE-2021-3984 | High | 7.8 | 2021-12-01 | vim is vulnerable to Heap-based Buffer Overflow |
CVE-2021-4019 | High | 7.8 | 2021-12-01 | vim is vulnerable to Heap-based Buffer Overflow |
CVE-2021-3973 | High | 7.8 | 2021-11-19 | vim is vulnerable to Heap-based Buffer Overflow |
CVE-2021-3968 | High | 8.0 | 2021-11-19 | vim is vulnerable to Heap-based Buffer Overflow |
CVE-2021-3974 | High | 7.8 | 2021-11-19 | vim is vulnerable to Use After Free |
CVE-2021-3928 | High | 7.8 | 2021-11-05 | vim is vulnerable to Use of Uninitialized Variable |
CVE-2021-3927 | High | 7.8 | 2021-11-05 | vim is vulnerable to Heap-based Buffer Overflow |
CVE-2021-3903 | High | 7.8 | 2021-10-27 | vim is vulnerable to Heap-based Buffer Overflow |
CVE-2021-3872 | High | 7.8 | 2021-10-19 | vim is vulnerable to Heap-based Buffer Overflow |
CVE-2021-3875 | Medium | 5.5 | 2021-10-15 | vim is vulnerable to Heap-based Buffer Overflow |
CVE-2021-3796 | High | 7.3 | 2021-09-15 | vim is vulnerable to Use After Free |
CVE-2021-3778 | High | 7.8 | 2021-09-15 | vim is vulnerable to Heap-based Buffer Overflow |
CVE-2021-3770 | High | 7.8 | 2021-09-06 | vim is vulnerable to Heap-based Buffer Overflow |
CVE-2019-20807 | Medium | 5.3 | 2020-05-28 | In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces (e.g., Python, Ruby, or Lua). |
CVE-2019-20079 | High | 7.8 | 2019-12-30 | The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory. |
CVE-2019-12735 | High | 8.6 | 2019-06-05 | getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as de… |
CVE-2017-17087 | Medium | 5.5 | 2017-12-01 | fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group (which may be different from the group ownership of the… |
CVE-2017-1000382 | Medium | 5.5 | 2017-10-31 | VIM version 8.0.1187 (and other versions most likely) ignores umask when creating a swap file ("[ORIGINAL_FILENAME].swp") resulting in files that may be world… |
CVE-2017-11109 | High | 7.8 | 2017-07-08 | Vim 8.0 allows attackers to cause a denial of service (invalid free) or possibly have unspecified other impact via a crafted source (aka -S) file. NOTE: there… |
CVE-2017-6350 | Critical | 9.8 | 2017-02-27 | An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree le… |
CVE-2017-6349 | Critical | 9.8 | 2017-02-27 | An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length… |
CVE-2017-5953 | Critical | 9.8 | 2017-02-10 | vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result in an integer overflow at a memory all… |
CVE-2016-1248 | High | 7.8 | 2016-11-23 | vim before patch 8.0.0056 does not properly validate values for the 'filetype', 'syntax' and 'keymap' options, which may result in the execution of arbitrary c… |
CVE-2010-3914 | | 2010-11-03 | Untrusted search path vulnerability in VIM Development Group GVim before 7.3.034, and possibly other versions before 7.3.46, allows local users, and possibly r… | |
CVE-2008-6235 | | 2009-02-21 | The Netrw plugin (netrw.vim) in Vim 7.0 and 7.1 allows user-assisted attackers to execute arbitrary commands via shell metacharacters in a filename used by the… | |
CVE-2008-3076 | | 2009-02-21 | The Netrw plugin 125 in netrw.vim in Vim 7.2a.10 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames used by the exe… | |
CVE-2008-3075 | | 2009-02-21 | The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary code via the "!" (exclamation point) sh… | |
CVE-2008-3074 | | 2009-02-21 | The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary code via the "!" (exclamation point) sh… | |
CVE-2009-0316 | | 2009-01-28 | Untrusted search path vulnerability in src/if_python.c in the Python interface in Vim before 7.2.045 allows local users to execute arbitrary code via a Trojan… | |
CVE-2008-4677 | | 2008-10-22 | autoload/netrw.vim (aka the Netrw Plugin) 109, 131, and other versions before 133k for Vim 7.1.266, other 7.1 versions, and 7.2 stores credentials for an FTP s… | |
CVE-2008-3432 | | 2008-10-10 | Heap-based buffer overflow in the mch_expand_wildcards function in os_unix.c in Vim 6.2 and 6.3 allows user-assisted attackers to execute arbitrary code via sh… | |
CVE-2008-4101 | | 2008-09-18 | Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to (1) execute arbitrary shell commands by enterin… | |
CVE-2008-3294 | | 2008-07-24 | src/configure.in in Vim 5.0 through 7.1, when used for a build with Python support, does not ensure that the Makefile-conf temporary file has the intended owne… | |
CVE-2008-2712 | | 2008-06-16 | Vim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary commands via Vim scripts that do not properly sanitize inputs b… |