VI
Product
vim
by vim · last CVE Aug 19, 2026
260
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 170Medium 71Low 4
Watch

Add vim to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-3236
5.5
0%
Aug 11
vim 8.2.2348 is affected by null pointer dereference, allows local attackers to cause a denial of service (DoS) via the ex_buffer_all method
Affected: 8.2.2348
CVE-2023-2609
5.5
0%
May 9
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1531
Affected: before 9.0.1531
CVE-2023-1355
5.5
0%
Mar 11
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1402
Affected: before 9.0.1402
CVE-2023-1264
5.5
0%
Mar 7
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392
Affected: before 9.0.1392
CVE-2022-4293
5.5
0%
Dec 5
Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804
Affected: before 9.0.0804
CVE-2022-3278
5.5
1%
Sep 23
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0552
Affected: before 9.0.0552
CVE-2022-3153
5.5
0%
Sep 8
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404
Affected: before 9.0.0404
CVE-2022-2980
5.5
1%
Aug 25
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259
Affected: before 9.0.0259
CVE-2022-2923
5.5
0%
Aug 22
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
Affected: before 9.0.0240
CVE-2022-2874
5.5
0%
Aug 18
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0224
Affected: before 9.0.0224
CVE-2022-2598
5.5
1%
Aug 1
Out-of-bounds Write to API in vim/vim
Affected: before 9.0.0100
CVE-2022-2231
5.5
1%
Jun 28
NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2
Affected: before 8.2.5169
CVE-2022-2208
5.5
1%
Jun 27
NULL Pointer Dereference in vim/vim
Affected: before 8.2.5163
CVE-2022-1771
5.5
1%
May 18
Uncontrolled Recursion in GitHub repository vim/vim prior to 8.2.4975
Affected: before 8.2.4975
CVE-2022-1725
5.5
1%
May 16
NULL Pointer Dereference in vim/vim
Affected: before 8.2.4959
CVE-2022-1674
5.5
2%
May 12
NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in vim/vim
Affected: before 8.2.4938
CVE-2022-1420
5.5
1%
Apr 21
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774
Affected: before 8.2.4774
CVE-2022-0714
5.5
13%
Feb 22
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4436
Affected: through 8.2.4436
CVE-2022-0696
5.5
2%
Feb 21
NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4428
Affected: before 8.2.4428
CVE-2022-0319
5.5
1%
Jan 21
Out-of-bounds Read in vim/vim prior to 8.2
Affected: before 8.2.4154
CVE-2022-0156
5.5
2%
Jan 10
vim is vulnerable to Use After Free
Affected: before 8.2.4040
CVE-2021-4193
5.5
2%
Dec 31
vim is vulnerable to Out-of-bounds Read
Affected: before 8.2.3950
CVE-2021-3875
5.5
2%
Oct 15
vim is vulnerable to Heap-based Buffer Overflow
Affected: before 8.2.3489
CVE-2017-17087
5.5
0%
Dec 1
fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group (which may be different from the group ownership of the original file),…
Affected: before 8.0.1263
CVE-2017-1000382
5.5
0%
Oct 31
VIM version 8.0.1187 (and other versions most likely) ignores umask when creating a swap file ("[ORIGINAL_FILENAME].swp") resulting in files that may be world readable or…
Affected: through 8.0.1187
CVE-2026-47167
5.3
0%
Jun 11
Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex
Affected: < 9.2.0496
CVE-2026-44656
5.3
1%
May 8
Vim: OS Command Injection via 'path' completion
Affected: < 9.2.0435
CVE-2024-41957
5.3
0%
Aug 1
Vim is an open source command line text editor
Affected: before 9.1.0647
CVE-2023-2426
5.3
0%
Apr 29
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499
Affected: before 9.0.1499
CVE-2019-20807
5.3
0%
May 28
In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces (e.g., Python, Ruby, or Lua)
Affected: before 8.1.0881
CVE-2024-47814
4.7
0%
Oct 7
Vim is an open source, command line text editor
Affected: before 9.1.0764
CVE-2024-43374
4.7
0%
Aug 16
The UNIX editor Vim prior to version 9.1.0678 has a use-after-free error in argument list handling
Affected: before 9.1.0678
CVE-2023-48706
4.7
1%
Nov 22
Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability
Affected: before 9.0.2121
CVE-2026-42307
4.4
1%
May 8
Vim: OS Command Injection in netrw
Affected: < 9.2.0383
CVE-2026-28420
4.4
0%
Feb 27
Vim has Heap-based Buffer Overflow and OOB Read in :terminal
Affected: < 9.2.0076
CVE-2025-29768
4.4
0%
Mar 13
Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198
Affected: before 9.1.1198
CVE-2023-48237
4.3
1%
Nov 16
Vim is an open source command line text editor
Affected: before 9.0.2112
CVE-2023-48236
4.3
1%
Nov 16
Vim is an open source command line text editor
Affected: before 9.0.2111
CVE-2023-48235
4.3
1%
Nov 16
Vim is an open source command line text editor
Affected: before 9.0.2110
CVE-2023-48234
4.3
1%
Nov 16
Vim is an open source command line text editor
Affected: before 9.0.2109
CVE-2023-48233
4.3
1%
Nov 16
Vim is an open source command line text editor
Affected: before 9.0.2108
CVE-2023-48232
4.3
1%
Nov 16
Vim is an open source command line text editor
Affected: before 9.0.2107
CVE-2023-48231
4.3
1%
Nov 16
Vim is an open source command line text editor
Affected: before 9.0.2106
CVE-2025-26603
4.2
0%
Feb 18
Vim is a greatly improved version of the good old UNIX editor Vi
Affected: before 9.1.1115
CVE-2024-41965
4.2
0%
Aug 1
Vim is an open source command line text editor
Affected: before 9.1.0648
CVE-2025-53906
4.1
1%
Jul 15
Vim is an open source, command line text editor
Affected: before 9.1.1551
CVE-2025-53905
4.1
0%
Jul 15
Vim is an open source, command line text editor
Affected: before 9.1.1552
CVE-2026-73075
3.9
0%
Aug 11
Vim: Out-of-bounds Access in Popup Opacity Handling
Affected: >= 9.2.0469, < 9.2.0843
CVE-2026-73071
3.3
0%
Aug 11
Vim: Use-after-free in JSON Decoding
Affected: >= 9.2.0511, < 9.2.0844
CVE-2022-0158
3.3
2%
Jan 10
vim is vulnerable to Heap-based Buffer Overflow
Affected: before 8.2.4049
Page 5 of 6 · 260 total
1…456