VI
Product
vim
260
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 170Medium 71Low 4
Watch
Add vim to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-28422 | 2.2 | Feb 27 | Vim has stack-buffer-overflow in build_stl_str_hl() Affected: < 9.2.0078 |
| CVE-2008-6235 | – | Feb 21 | The Netrw plugin (netrw.vim) in Vim 7.0 and 7.1 allows user-assisted attackers to execute arbitrary commands via shell metacharacters in a filename used by the (1) "D" (delete)… Affected: 7.0; 7.1 |
| CVE-2008-3076 | – | Feb 21 | The Netrw plugin 125 in netrw.vim in Vim 7.2a.10 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames used by the execute and system… Affected: 7.2a.10 |
| CVE-2008-3075 | – | Feb 21 | The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary code via the "!" (exclamation point) shell metacharacter in… Affected: 7.0; 7.1; 7.1.266; 7.1.314; 7.2; 7.2a.10 |
| CVE-2008-3074 | – | Feb 21 | The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary code via the "!" (exclamation point) shell metacharacter in… Affected: 7.0; 7.1; 7.1.266; 7.1.314; 7.2 |
| CVE-2009-0316 | – | Jan 28 | Untrusted search path vulnerability in src/if_python.c in the Python interface in Vim before 7.2.045 allows local users to execute arbitrary code via a Trojan horse Python file in… Affected: through 7.2; 1.0; 1.22; 3.0; 4.0; 5.0; +15 more |
| CVE-2008-3432 | – | Oct 10 | Heap-based buffer overflow in the mch_expand_wildcards function in os_unix.c in Vim 6.2 and 6.3 allows user-assisted attackers to execute arbitrary code via shell metacharacters… Affected: 6.2; 6.3 |
| CVE-2008-4101 | – | Sep 18 | Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to (1) execute arbitrary shell commands by entering a K keystroke on a… Affected: through 7.2; 3.0; 4.0; 5.0; 5.1; 5.2; +13 more |
| CVE-2008-3294 | – | Jul 24 | src/configure.in in Vim 5.0 through 7.1, when used for a build with Python support, does not ensure that the Makefile-conf temporary file has the intended ownership and… Affected: 5.0; 5.1; 5.2; 5.3; 5.4; 5.5; +10 more |
| CVE-2008-2712 | – | Jun 16 | Vim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary commands via Vim scripts that do not properly sanitize inputs before invoking the… Affected: through 6.4; 7.0 through 7.1.314 |