VI
Product
vim
by vim · last CVE Aug 19, 2026
260
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 170Medium 71Low 4
Watch

Add vim to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-73074
6.7
0%
Aug 11
Vim: Heap Buffer Overflow in Text Property Handling
Affected: < 9.2.0841
CVE-2026-41411
6.6
1%
Apr 24
Vim: Command injection via backtick expansion in tag filenames
Affected: < 9.2.0357
CVE-2026-28419
6.6
0%
Feb 27
Vim is an open source, command line text editor
Affected: before 9.2.0075
CVE-2026-25749
6.6
0%
Feb 6
Vim is an open source, command line text editor
Affected: before 9.1.2132
CVE-2023-1175
6.6
0%
Mar 4
Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378
Affected: before 9.0.1378
CVE-2023-1170
6.6
0%
Mar 3
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376
Affected: before 9.0.1376
CVE-2022-0213
6.6
1%
Jan 14
Heap-based Buffer Overflow in vim/vim
Affected: before 8.2
CVE-2026-57451
6.1
0%
Jun 25
Vim: Out-of-bounds Read in Text Property Count
Affected: < 9.2.0670
CVE-2026-57454
6.1
0%
Jun 25
Vim: Out-of-bounds Read with Text Properties
Affected: >= 9.2.0320, < 9.2.0679
CVE-2026-73070
5.5
0%
Aug 11
Vim: Stack Buffer Overflow in the Vim Socket Server
Affected: < 9.2.0842
CVE-2026-59857
5.5
0%
Jul 9
Vim: Out-of-bounds Write in SAL Soundfolding
Affected: < 9.2.0725
CVE-2026-55892
5.5
0%
Jun 25
Vim: Out-of-bounds Write in Spell File Prefix Dump
Affected: < 9.2.0662
CVE-2026-57452
5.5
0%
Jun 25
Vim: Out-of-bounds Read with libsodium-encrypted Files
Affected: < 9.2.0671
CVE-2026-45130
5.5
0%
May 8
Vim: Heap Buffer Overflow in spell file loading
Affected: < 9.2.0450
CVE-2026-32249
5.5
0%
Mar 12
Vim is an open source, command line text editor
Affected: 9.1.0011 before 9.2.0137
CVE-2026-28418
5.5
0%
Feb 27
Vim is an open source, command line text editor
Affected: before 9.2.0074
CVE-2025-9390
5.5
0%
Aug 24
A security flaw has been discovered in vim up to 9.1.1615
Affected: 9.1.1459 before 9.1.1616
CVE-2025-9389
5.5
0%
Aug 24
A vulnerability was identified in vim 9.1.0000
Affected: 9.1.0000
CVE-2025-24014
5.5
0%
Jan 20
Vim is an open source, command line text editor
Affected: before 9.1.1043
CVE-2025-22134
5.5
0%
Jan 13
When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does not properly end visual mode and…
Affected: through 9.1.1003
CVE-2024-45306
5.5
0%
Sep 2
heap-buffer-overflow in Vim
Affected: >= 9.1.0038, < 9.1.0707
CVE-2024-43790
5.5
0%
Aug 22
Vim is an open source command line text editor
Affected: 9.1.0425 before 9.1.0689
CVE-2023-46246
5.5
0%
Oct 27
Vim is an improved version of the good old UNIX editor Vi
Affected: before 9.0.2068
CVE-2023-5441
5.5
0%
Oct 5
NULL Pointer Dereference in GitHub repository vim/vim prior to 20d161ace307e28690229b68584f2d84556f8960
Affected: before 9.0.1994
CVE-2021-3236
5.5
0%
Aug 11
vim 8.2.2348 is affected by null pointer dereference, allows local attackers to cause a denial of service (DoS) via the ex_buffer_all method
Affected: 8.2.2348
CVE-2023-2609
5.5
0%
May 9
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1531
Affected: before 9.0.1531
CVE-2023-1355
5.5
0%
Mar 11
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1402
Affected: before 9.0.1402
CVE-2023-1264
5.5
0%
Mar 7
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392
Affected: before 9.0.1392
CVE-2022-4293
5.5
0%
Dec 5
Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804
Affected: before 9.0.0804
CVE-2022-3278
5.5
1%
Sep 23
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0552
Affected: before 9.0.0552
CVE-2022-3153
5.5
0%
Sep 8
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404
Affected: before 9.0.0404
CVE-2022-2980
5.5
1%
Aug 25
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259
Affected: before 9.0.0259
CVE-2022-2923
5.5
0%
Aug 22
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
Affected: before 9.0.0240
CVE-2022-2874
5.5
0%
Aug 18
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0224
Affected: before 9.0.0224
CVE-2022-2598
5.5
1%
Aug 1
Out-of-bounds Write to API in vim/vim
Affected: before 9.0.0100
CVE-2022-2231
5.5
1%
Jun 28
NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2
Affected: before 8.2.5169
CVE-2022-2208
5.5
1%
Jun 27
NULL Pointer Dereference in vim/vim
Affected: before 8.2.5163
CVE-2022-1771
5.5
1%
May 18
Uncontrolled Recursion in GitHub repository vim/vim prior to 8.2.4975
Affected: before 8.2.4975
CVE-2022-1725
5.5
1%
May 16
NULL Pointer Dereference in vim/vim
Affected: before 8.2.4959
CVE-2022-1674
5.5
2%
May 12
NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in vim/vim
Affected: before 8.2.4938
CVE-2022-1420
5.5
1%
Apr 21
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774
Affected: before 8.2.4774
CVE-2022-0714
5.5
13%
Feb 22
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4436
Affected: through 8.2.4436
CVE-2022-0696
5.5
2%
Feb 21
NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4428
Affected: before 8.2.4428
CVE-2022-0319
5.5
1%
Jan 21
Out-of-bounds Read in vim/vim prior to 8.2
Affected: before 8.2.4154
CVE-2022-0156
5.5
2%
Jan 10
vim is vulnerable to Use After Free
Affected: before 8.2.4040
CVE-2021-4193
5.5
2%
Dec 31
vim is vulnerable to Out-of-bounds Read
Affected: before 8.2.3950
CVE-2021-3875
5.5
2%
Oct 15
vim is vulnerable to Heap-based Buffer Overflow
Affected: before 8.2.3489
CVE-2017-17087
5.5
0%
Dec 1
fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group (which may be different from the group ownership of the original file),…
Affected: before 8.0.1263
CVE-2017-1000382
5.5
0%
Oct 31
VIM version 8.0.1187 (and other versions most likely) ignores umask when creating a swap file ("[ORIGINAL_FILENAME].swp") resulting in files that may be world readable or…
Affected: through 8.0.1187
CVE-2026-47167
5.3
0%
Jun 11
Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex
Affected: < 9.2.0496
Page 1 of 2 · 71 total