VI
Product
vim
260
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 170Medium 71Low 4
Watch
Add vim to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-44656 | 5.3 | May 8 | Vim: OS Command Injection via 'path' completion Affected: < 9.2.0435 |
| CVE-2024-41957 | 5.3 | Aug 1 | Vim is an open source command line text editor Affected: before 9.1.0647 |
| CVE-2023-2426 | 5.3 | Apr 29 | Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499 Affected: before 9.0.1499 |
| CVE-2019-20807 | 5.3 | May 28 | In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces (e.g., Python, Ruby, or Lua) Affected: before 8.1.0881 |
| CVE-2024-47814 | 4.7 | Oct 7 | Vim is an open source, command line text editor Affected: before 9.1.0764 |
| CVE-2024-43374 | 4.7 | Aug 16 | The UNIX editor Vim prior to version 9.1.0678 has a use-after-free error in argument list handling Affected: before 9.1.0678 |
| CVE-2023-48706 | 4.7 | Nov 22 | Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability Affected: before 9.0.2121 |
| CVE-2026-42307 | 4.4 | May 8 | Vim: OS Command Injection in netrw Affected: < 9.2.0383 |
| CVE-2026-28420 | 4.4 | Feb 27 | Vim has Heap-based Buffer Overflow and OOB Read in :terminal Affected: < 9.2.0076 |
| CVE-2025-29768 | 4.4 | Mar 13 | Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198 Affected: before 9.1.1198 |
| CVE-2023-48237 | 4.3 | Nov 16 | Vim is an open source command line text editor Affected: before 9.0.2112 |
| CVE-2023-48236 | 4.3 | Nov 16 | Vim is an open source command line text editor Affected: before 9.0.2111 |
| CVE-2023-48235 | 4.3 | Nov 16 | Vim is an open source command line text editor Affected: before 9.0.2110 |
| CVE-2023-48234 | 4.3 | Nov 16 | Vim is an open source command line text editor Affected: before 9.0.2109 |
| CVE-2023-48233 | 4.3 | Nov 16 | Vim is an open source command line text editor Affected: before 9.0.2108 |
| CVE-2023-48232 | 4.3 | Nov 16 | Vim is an open source command line text editor Affected: before 9.0.2107 |
| CVE-2023-48231 | 4.3 | Nov 16 | Vim is an open source command line text editor Affected: before 9.0.2106 |
| CVE-2025-26603 | 4.2 | Feb 18 | Vim is a greatly improved version of the good old UNIX editor Vi Affected: before 9.1.1115 |
| CVE-2024-41965 | 4.2 | Aug 1 | Vim is an open source command line text editor Affected: before 9.1.0648 |
| CVE-2025-53906 | 4.1 | Jul 15 | Vim is an open source, command line text editor Affected: before 9.1.1551 |
| CVE-2025-53905 | 4.1 | Jul 15 | Vim is an open source, command line text editor Affected: before 9.1.1552 |