NE
Product
Neovim
31
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 21Medium 10Low 0
Watch
Add Neovim to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-12735 | 8.6 | Jun 5 | getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by… Affected: before 0.3.6 |
| CVE-2023-5535 | 7.8 | Oct 11 | Use After Free in GitHub repository vim/vim prior to v9.0.2010 Affected: through 0.9.5 |
| CVE-2023-4781 | 7.8 | Sep 5 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873 Affected: through 0.9.5 |
| CVE-2023-4752 | 7.8 | Sep 4 | Use After Free in GitHub repository vim/vim prior to 9.0.1858 Affected: 0.5.0 before 0.10.0 |
| CVE-2023-4750 | 7.8 | Sep 4 | Use After Free in GitHub repository vim/vim prior to 9.0.1857 Affected: before 0.10.0 |
| CVE-2023-4733 | 7.8 | Sep 4 | Use After Free in GitHub repository vim/vim prior to 9.0.1840 Affected: 0.7.0 before 0.9.2 |
| CVE-2023-4751 | 7.8 | Sep 3 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331 Affected: before 0.9.0 |
| CVE-2023-4738 | 7.8 | Sep 2 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848 Affected: before 0.10.0 |
| CVE-2023-4734 | 7.8 | Sep 2 | Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846 Affected: 0.7.0 before 0.10.0 |
| CVE-2023-0433 | 7.8 | Jan 21 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225 Affected: 0.1.0 before 0.8.3 |
| CVE-2023-0288 | 7.8 | Jan 13 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189 Affected: through 0.8.3 |
| CVE-2023-0049 | 7.8 | Jan 4 | Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143 Affected: 0.1.0 before 0.10.0 |
| CVE-2022-3591 | 7.8 | Dec 2 | Use After Free in GitHub repository vim/vim prior to 9.0.0789 Affected: 0.1.0 before 0.9.0 |
| CVE-2022-4141 | 7.8 | Nov 25 | Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command Affected: 0.1.0 before 0.10.0 |
| CVE-2022-3324 | 7.8 | Sep 27 | Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598 Affected: 0.1.0 before 0.9.5 |
| CVE-2022-3297 | 7.8 | Sep 25 | Use After Free in GitHub repository vim/vim prior to 9.0.0579 Affected: 0.5.0 before 0.10.0 |
| CVE-2022-3296 | 7.8 | Sep 25 | Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0577 Affected: 0.1.0 before 0.9.0 |
| CVE-2022-3256 | 7.8 | Sep 22 | Use After Free in GitHub repository vim/vim prior to 9.0.0530 Affected: 0.1.0 before 0.8.0 |
| CVE-2022-3134 | 7.8 | Sep 6 | Use After Free in GitHub repository vim/vim prior to 9.0.0389 Affected: 0.5.0 before 0.9.0 |
| CVE-2022-3037 | 7.8 | Aug 30 | Use After Free in GitHub repository vim/vim prior to 9.0.0322 Affected: 0.5.0 before 0.9.0 |
| CVE-2021-4019 | 7.8 | Dec 1 | vim is vulnerable to Heap-based Buffer Overflow Affected: before 0.7.0 |
| CVE-2026-25749 | 6.6 | Feb 6 | Vim is an open source, command line text editor Affected: through 0.11.6 |
| CVE-2023-1175 | 6.6 | Mar 4 | Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378 Affected: through 0.8.3 |
| CVE-2023-1170 | 6.6 | Mar 3 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376 Affected: through 0.8.3 |
| CVE-2026-45130 | 5.5 | May 8 | Vim: Heap Buffer Overflow in spell file loading Affected: through 0.12.2 |
| CVE-2025-22134 | 5.5 | Jan 13 | When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does not properly end visual mode and… Affected: through 0.10.4 |
| CVE-2026-11487 | 5.3 | Jun 8 | Neovim View Branch secure.lua M.read command injection Affected: 0.12.0; 0.12.1; 0.12.2 |
| CVE-2023-2426 | 5.3 | Apr 29 | Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499 Affected: 0.7.0 before 0.10.0 |
| CVE-2024-43374 | 4.7 | Aug 16 | The UNIX editor Vim prior to version 9.1.0678 has a use-after-free error in argument list handling Affected: through 0.10.4 |
| CVE-2023-48706 | 4.7 | Nov 22 | Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability Affected: through 0.9.5 |
| CVE-2024-41965 | 4.2 | Aug 1 | Vim is an open source command line text editor Affected: 0.10.0 before 0.10.2 |
Showing 31