VI
Product
vim
260
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 170Medium 71Low 4
Watch
Add vim to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-3236 | 5.5 | Aug 11 | vim 8.2.2348 is affected by null pointer dereference, allows local attackers to cause a denial of service (DoS) via the ex_buffer_all method Affected: 8.2.2348 |
| CVE-2023-2609 | 5.5 | May 9 | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1531 Affected: before 9.0.1531 |
| CVE-2023-1355 | 5.5 | Mar 11 | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1402 Affected: before 9.0.1402 |
| CVE-2023-1264 | 5.5 | Mar 7 | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392 Affected: before 9.0.1392 |
| CVE-2022-4293 | 5.5 | Dec 5 | Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804 Affected: before 9.0.0804 |
| CVE-2022-3278 | 5.5 | Sep 23 | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0552 Affected: before 9.0.0552 |
| CVE-2022-3153 | 5.5 | Sep 8 | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404 Affected: before 9.0.0404 |
| CVE-2022-2980 | 5.5 | Aug 25 | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259 Affected: before 9.0.0259 |
| CVE-2022-2923 | 5.5 | Aug 22 | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240 Affected: before 9.0.0240 |
| CVE-2022-2874 | 5.5 | Aug 18 | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0224 Affected: before 9.0.0224 |
| CVE-2022-2598 | 5.5 | Aug 1 | Out-of-bounds Write to API in vim/vim Affected: before 9.0.0100 |
| CVE-2022-2231 | 5.5 | Jun 28 | NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2 Affected: before 8.2.5169 |
| CVE-2022-2208 | 5.5 | Jun 27 | NULL Pointer Dereference in vim/vim Affected: before 8.2.5163 |
| CVE-2022-1771 | 5.5 | May 18 | Uncontrolled Recursion in GitHub repository vim/vim prior to 8.2.4975 Affected: before 8.2.4975 |
| CVE-2022-1725 | 5.5 | May 16 | NULL Pointer Dereference in vim/vim Affected: before 8.2.4959 |
| CVE-2022-1674 | 5.5 | May 12 | NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in vim/vim Affected: before 8.2.4938 |
| CVE-2022-1420 | 5.5 | Apr 21 | Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774 Affected: before 8.2.4774 |
| CVE-2022-0714 | 5.5 | Feb 22 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4436 Affected: through 8.2.4436 |
| CVE-2022-0696 | 5.5 | Feb 21 | NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4428 Affected: before 8.2.4428 |
| CVE-2022-0319 | 5.5 | Jan 21 | Out-of-bounds Read in vim/vim prior to 8.2 Affected: before 8.2.4154 |
| CVE-2022-0156 | 5.5 | Jan 10 | vim is vulnerable to Use After Free Affected: before 8.2.4040 |
| CVE-2021-4193 | 5.5 | Dec 31 | vim is vulnerable to Out-of-bounds Read Affected: before 8.2.3950 |
| CVE-2021-3875 | 5.5 | Oct 15 | vim is vulnerable to Heap-based Buffer Overflow Affected: before 8.2.3489 |
| CVE-2017-17087 | 5.5 | Dec 1 | fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group (which may be different from the group ownership of the original file),… Affected: before 8.0.1263 |
| CVE-2017-1000382 | 5.5 | Oct 31 | VIM version 8.0.1187 (and other versions most likely) ignores umask when creating a swap file ("[ORIGINAL_FILENAME].swp") resulting in files that may be world readable or… Affected: through 8.0.1187 |
| CVE-2026-47167 | 5.3 | Jun 11 | Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex Affected: < 9.2.0496 |
| CVE-2026-44656 | 5.3 | May 8 | Vim: OS Command Injection via 'path' completion Affected: < 9.2.0435 |
| CVE-2024-41957 | 5.3 | Aug 1 | Vim is an open source command line text editor Affected: before 9.1.0647 |
| CVE-2023-2426 | 5.3 | Apr 29 | Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499 Affected: before 9.0.1499 |
| CVE-2019-20807 | 5.3 | May 28 | In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces (e.g., Python, Ruby, or Lua) Affected: before 8.1.0881 |
| CVE-2024-47814 | 4.7 | Oct 7 | Vim is an open source, command line text editor Affected: before 9.1.0764 |
| CVE-2024-43374 | 4.7 | Aug 16 | The UNIX editor Vim prior to version 9.1.0678 has a use-after-free error in argument list handling Affected: before 9.1.0678 |
| CVE-2023-48706 | 4.7 | Nov 22 | Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability Affected: before 9.0.2121 |
| CVE-2026-42307 | 4.4 | May 8 | Vim: OS Command Injection in netrw Affected: < 9.2.0383 |
| CVE-2026-28420 | 4.4 | Feb 27 | Vim has Heap-based Buffer Overflow and OOB Read in :terminal Affected: < 9.2.0076 |
| CVE-2025-29768 | 4.4 | Mar 13 | Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198 Affected: before 9.1.1198 |
| CVE-2023-48237 | 4.3 | Nov 16 | Vim is an open source command line text editor Affected: before 9.0.2112 |
| CVE-2023-48236 | 4.3 | Nov 16 | Vim is an open source command line text editor Affected: before 9.0.2111 |
| CVE-2023-48235 | 4.3 | Nov 16 | Vim is an open source command line text editor Affected: before 9.0.2110 |
| CVE-2023-48234 | 4.3 | Nov 16 | Vim is an open source command line text editor Affected: before 9.0.2109 |
| CVE-2023-48233 | 4.3 | Nov 16 | Vim is an open source command line text editor Affected: before 9.0.2108 |
| CVE-2023-48232 | 4.3 | Nov 16 | Vim is an open source command line text editor Affected: before 9.0.2107 |
| CVE-2023-48231 | 4.3 | Nov 16 | Vim is an open source command line text editor Affected: before 9.0.2106 |
| CVE-2025-26603 | 4.2 | Feb 18 | Vim is a greatly improved version of the good old UNIX editor Vi Affected: before 9.1.1115 |
| CVE-2024-41965 | 4.2 | Aug 1 | Vim is an open source command line text editor Affected: before 9.1.0648 |
| CVE-2025-53906 | 4.1 | Jul 15 | Vim is an open source, command line text editor Affected: before 9.1.1551 |
| CVE-2025-53905 | 4.1 | Jul 15 | Vim is an open source, command line text editor Affected: before 9.1.1552 |
| CVE-2026-73075 | 3.9 | Aug 11 | Vim: Out-of-bounds Access in Popup Opacity Handling Affected: >= 9.2.0469, < 9.2.0843 |
| CVE-2026-73071 | 3.3 | Aug 11 | Vim: Use-after-free in JSON Decoding Affected: >= 9.2.0511, < 9.2.0844 |
| CVE-2022-0158 | 3.3 | Jan 10 | vim is vulnerable to Heap-based Buffer Overflow Affected: before 8.2.4049 |
