VI
Product
vim
260
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 170Medium 71Low 4
Watch
Add vim to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-73074 | 6.7 | Aug 11 | Vim: Heap Buffer Overflow in Text Property Handling Affected: < 9.2.0841 |
| CVE-2026-41411 | 6.6 | Apr 24 | Vim: Command injection via backtick expansion in tag filenames Affected: < 9.2.0357 |
| CVE-2026-28419 | 6.6 | Feb 27 | Vim is an open source, command line text editor Affected: before 9.2.0075 |
| CVE-2026-25749 | 6.6 | Feb 6 | Vim is an open source, command line text editor Affected: before 9.1.2132 |
| CVE-2023-1175 | 6.6 | Mar 4 | Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378 Affected: before 9.0.1378 |
| CVE-2023-1170 | 6.6 | Mar 3 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376 Affected: before 9.0.1376 |
| CVE-2022-0213 | 6.6 | Jan 14 | Heap-based Buffer Overflow in vim/vim Affected: before 8.2 |
| CVE-2026-57451 | 6.1 | Jun 25 | Vim: Out-of-bounds Read in Text Property Count Affected: < 9.2.0670 |
| CVE-2026-57454 | 6.1 | Jun 25 | Vim: Out-of-bounds Read with Text Properties Affected: >= 9.2.0320, < 9.2.0679 |
| CVE-2026-73070 | 5.5 | Aug 11 | Vim: Stack Buffer Overflow in the Vim Socket Server Affected: < 9.2.0842 |
| CVE-2026-59857 | 5.5 | Jul 9 | Vim: Out-of-bounds Write in SAL Soundfolding Affected: < 9.2.0725 |
| CVE-2026-55892 | 5.5 | Jun 25 | Vim: Out-of-bounds Write in Spell File Prefix Dump Affected: < 9.2.0662 |
| CVE-2026-57452 | 5.5 | Jun 25 | Vim: Out-of-bounds Read with libsodium-encrypted Files Affected: < 9.2.0671 |
| CVE-2026-45130 | 5.5 | May 8 | Vim: Heap Buffer Overflow in spell file loading Affected: < 9.2.0450 |
| CVE-2026-32249 | 5.5 | Mar 12 | Vim is an open source, command line text editor Affected: 9.1.0011 before 9.2.0137 |
| CVE-2026-28418 | 5.5 | Feb 27 | Vim is an open source, command line text editor Affected: before 9.2.0074 |
| CVE-2025-9390 | 5.5 | Aug 24 | A security flaw has been discovered in vim up to 9.1.1615 Affected: 9.1.1459 before 9.1.1616 |
| CVE-2025-9389 | 5.5 | Aug 24 | A vulnerability was identified in vim 9.1.0000 Affected: 9.1.0000 |
| CVE-2025-24014 | 5.5 | Jan 20 | Vim is an open source, command line text editor Affected: before 9.1.1043 |
| CVE-2025-22134 | 5.5 | Jan 13 | When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does not properly end visual mode and… Affected: through 9.1.1003 |
| CVE-2024-45306 | 5.5 | Sep 2 | heap-buffer-overflow in Vim Affected: >= 9.1.0038, < 9.1.0707 |
| CVE-2024-43790 | 5.5 | Aug 22 | Vim is an open source command line text editor Affected: 9.1.0425 before 9.1.0689 |
| CVE-2023-46246 | 5.5 | Oct 27 | Vim is an improved version of the good old UNIX editor Vi Affected: before 9.0.2068 |
| CVE-2023-5441 | 5.5 | Oct 5 | NULL Pointer Dereference in GitHub repository vim/vim prior to 20d161ace307e28690229b68584f2d84556f8960 Affected: before 9.0.1994 |
| CVE-2021-3236 | 5.5 | Aug 11 | vim 8.2.2348 is affected by null pointer dereference, allows local attackers to cause a denial of service (DoS) via the ex_buffer_all method Affected: 8.2.2348 |
| CVE-2023-2609 | 5.5 | May 9 | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1531 Affected: before 9.0.1531 |
| CVE-2023-1355 | 5.5 | Mar 11 | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1402 Affected: before 9.0.1402 |
| CVE-2023-1264 | 5.5 | Mar 7 | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392 Affected: before 9.0.1392 |
| CVE-2022-4293 | 5.5 | Dec 5 | Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804 Affected: before 9.0.0804 |
| CVE-2022-3278 | 5.5 | Sep 23 | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0552 Affected: before 9.0.0552 |
| CVE-2022-3153 | 5.5 | Sep 8 | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404 Affected: before 9.0.0404 |
| CVE-2022-2980 | 5.5 | Aug 25 | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259 Affected: before 9.0.0259 |
| CVE-2022-2923 | 5.5 | Aug 22 | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240 Affected: before 9.0.0240 |
| CVE-2022-2874 | 5.5 | Aug 18 | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0224 Affected: before 9.0.0224 |
| CVE-2022-2598 | 5.5 | Aug 1 | Out-of-bounds Write to API in vim/vim Affected: before 9.0.0100 |
| CVE-2022-2231 | 5.5 | Jun 28 | NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2 Affected: before 8.2.5169 |
| CVE-2022-2208 | 5.5 | Jun 27 | NULL Pointer Dereference in vim/vim Affected: before 8.2.5163 |
| CVE-2022-1771 | 5.5 | May 18 | Uncontrolled Recursion in GitHub repository vim/vim prior to 8.2.4975 Affected: before 8.2.4975 |
| CVE-2022-1725 | 5.5 | May 16 | NULL Pointer Dereference in vim/vim Affected: before 8.2.4959 |
| CVE-2022-1674 | 5.5 | May 12 | NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in vim/vim Affected: before 8.2.4938 |
| CVE-2022-1420 | 5.5 | Apr 21 | Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774 Affected: before 8.2.4774 |
| CVE-2022-0714 | 5.5 | Feb 22 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4436 Affected: through 8.2.4436 |
| CVE-2022-0696 | 5.5 | Feb 21 | NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4428 Affected: before 8.2.4428 |
| CVE-2022-0319 | 5.5 | Jan 21 | Out-of-bounds Read in vim/vim prior to 8.2 Affected: before 8.2.4154 |
| CVE-2022-0156 | 5.5 | Jan 10 | vim is vulnerable to Use After Free Affected: before 8.2.4040 |
| CVE-2021-4193 | 5.5 | Dec 31 | vim is vulnerable to Out-of-bounds Read Affected: before 8.2.3950 |
| CVE-2021-3875 | 5.5 | Oct 15 | vim is vulnerable to Heap-based Buffer Overflow Affected: before 8.2.3489 |
| CVE-2017-17087 | 5.5 | Dec 1 | fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group (which may be different from the group ownership of the original file),… Affected: before 8.0.1263 |
| CVE-2017-1000382 | 5.5 | Oct 31 | VIM version 8.0.1187 (and other versions most likely) ignores umask when creating a swap file ("[ORIGINAL_FILENAME].swp") resulting in files that may be world readable or… Affected: through 8.0.1187 |
| CVE-2026-47167 | 5.3 | Jun 11 | Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex Affected: < 9.2.0496 |
