VI
Product
vim
260
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 170Medium 71Low 4
Watch
Add vim to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-20703 | 9.8 | Jun 20 | Buffer Overflow vulnerability in VIM v.8.1.2135 allows a remote attacker to execute arbitrary code via the operand parameter Affected: 8.1.2135 |
| CVE-2022-3520 | 9.8 | Dec 2 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765 Affected: before 9.0.0765 |
| CVE-2022-0318 | 9.8 | Jan 21 | Heap-based Buffer Overflow in vim/vim prior to 8.2 Affected: before 8.2.4151 |
| CVE-2017-6350 | 9.8 | Feb 27 | An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a… Affected: through 8.0.0377 |
| CVE-2017-6349 | 9.8 | Feb 27 | An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length when reading a… Affected: through 8.0.0376 |
| CVE-2017-5953 | 9.8 | Feb 10 | vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result in an integer overflow at a memory allocation site and a… Affected: through 8.0.0055 |
Showing 6