Buffer Overflow vulnerability in VIM v.8.1.2135 allows a remote attacker to execute arbitrary code via the operand parameter

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765

Heap-based Buffer Overflow in vim/vim prior to 8.2

An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a…

An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length when reading a…

vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result in an integer overflow at a memory allocation site and a…

Vim: Arbitrary Code Execution via Netrw Menu Construction

Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name

Vim is an open source, command line text editor

Vim is an open source, command line text editor

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440

Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} injection occurs with tabpanel lacking…

getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by…

An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vms_fixfilename() function within file vim/src/os_vms.c

Vim: Out-of-bounds Read in Terminal Screen Snapshot

Vim modeline bypass via various options affects Vim < 9.2.0276

Heap-based Buffer Overflow in vim/vim

Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution

Vim: Arbitrary Ex Command Execution in C Omni-Completion

Vim: Arbitrary Code Execution via Shell Keyword Lookup

Vim: Arbitrary Command Execution via Malicious `.VimballRecord` Entry Replay in `vimball.vim`

Vim: Arbitrary Code Execution via PHP Omni-Completion

Vim: Arbitrary Code Execution via C Omni-Completion

Vim: Out-of-bounds Write in Spell File Word Count

Vim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filename

Vim: Stack out-of-bounds write in `spell_soundfold_sofo()` via an over-length `soundfold()` argument

Vim: Arbitrary Code Execution via Python Omni-Completion Docstrings

Vim: Arbitrary Code Execution via Python Omni-Completion

Vim: Arbitrary Code Execution via Python Omni-Completion

Vim Ex command injection in Vims NetBeans integration

Vim has a heap-buffer-overflow and a segmentation fault

Vim has OS Command Injection in netrw

Vim is an open source, command line text editor

A vulnerability classified as problematic was found in vim up to 9.1.1096

Vim before 9.0.2142 has a stack-based buffer overflow because did_set_langmap in map.c calls sprintf to write to the error buffer that is passed down to the option callback…

Use After Free in GitHub repository vim/vim prior to v9.0.2010

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873

Use After Free in GitHub repository vim/vim prior to 9.0.1858

Use After Free in GitHub repository vim/vim prior to 9.0.1857

Use After Free in GitHub repository vim/vim prior to 9.0.1840

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848

Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833

Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847

Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846

Divide By Zero in vim/vim from 9.0.1367-1 to 9.0.1367-3

Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1532

Divide By Zero in GitHub repository vim/vim prior to 9.0.1367

Divide By Zero in GitHub repository vim/vim prior to 9.0.1247

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225