NE
Vendor
Neovim
31
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-11487 | NE Neovim Neovim | 5.3 | Jun 8 | Neovim View Branch secure.lua M.read command injection |
| CVE-2026-45130 | NE Neovim Neovim | 5.5 | May 8 | Vim: Heap Buffer Overflow in spell file loading |
| CVE-2026-25749 | NE Neovim Neovim | 6.6 | Feb 6 | Vim is an open source, command line text editor |
| CVE-2025-22134 | NE Neovim Neovim | 5.5 | Jan 13 | When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does not properly end visual mode and… |
| CVE-2024-43374 | NE Neovim Neovim | 4.7 | Aug 16 | The UNIX editor Vim prior to version 9.1.0678 has a use-after-free error in argument list handling |
| CVE-2024-41965 | NE Neovim Neovim | 4.2 | Aug 1 | Vim is an open source command line text editor |
| CVE-2023-48706 | NE Neovim Neovim | 4.7 | Nov 22 | Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability |
| CVE-2023-5535 | NE Neovim Neovim | 7.8 | Oct 11 | Use After Free in GitHub repository vim/vim prior to v9.0.2010 |
| CVE-2023-4781 | NE Neovim Neovim | 7.8 | Sep 5 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873 |
| CVE-2023-4752 | NE Neovim Neovim | 7.8 | Sep 4 | Use After Free in GitHub repository vim/vim prior to 9.0.1858 |
| CVE-2023-4750 | NE Neovim Neovim | 7.8 | Sep 4 | Use After Free in GitHub repository vim/vim prior to 9.0.1857 |
| CVE-2023-4733 | NE Neovim Neovim | 7.8 | Sep 4 | Use After Free in GitHub repository vim/vim prior to 9.0.1840 |
| CVE-2023-4751 | NE Neovim Neovim | 7.8 | Sep 3 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331 |
| CVE-2023-4738 | NE Neovim Neovim | 7.8 | Sep 2 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848 |
| CVE-2023-4734 | NE Neovim Neovim | 7.8 | Sep 2 | Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846 |
| CVE-2023-2426 | NE Neovim Neovim | 5.3 | Apr 29 | Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499 |
| CVE-2023-1175 | NE Neovim Neovim | 6.6 | Mar 4 | Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378 |
| CVE-2023-1170 | NE Neovim Neovim | 6.6 | Mar 3 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376 |
| CVE-2023-0433 | NE Neovim Neovim | 7.8 | Jan 21 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225 |
| CVE-2023-0288 | NE Neovim Neovim | 7.8 | Jan 13 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189 |
| CVE-2023-0049 | NE Neovim Neovim | 7.8 | Jan 4 | Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143 |
| CVE-2022-3591 | NE Neovim Neovim | 7.8 | Dec 2 | Use After Free in GitHub repository vim/vim prior to 9.0.0789 |
| CVE-2022-4141 | NE Neovim Neovim | 7.8 | Nov 25 | Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command |
| CVE-2022-3324 | NE Neovim Neovim | 7.8 | Sep 27 | Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598 |
| CVE-2022-3297 | NE Neovim Neovim | 7.8 | Sep 25 | Use After Free in GitHub repository vim/vim prior to 9.0.0579 |
| CVE-2022-3296 | NE Neovim Neovim | 7.8 | Sep 25 | Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0577 |
| CVE-2022-3256 | NE Neovim Neovim | 7.8 | Sep 22 | Use After Free in GitHub repository vim/vim prior to 9.0.0530 |
| CVE-2022-3134 | NE Neovim Neovim | 7.8 | Sep 6 | Use After Free in GitHub repository vim/vim prior to 9.0.0389 |
| CVE-2022-3037 | NE Neovim Neovim | 7.8 | Aug 30 | Use After Free in GitHub repository vim/vim prior to 9.0.0322 |
| CVE-2021-4019 | NE Neovim Neovim | 7.8 | Dec 1 | vim is vulnerable to Heap-based Buffer Overflow |
| CVE-2019-12735 | NE Neovim Neovim | 8.6 | Jun 5 | getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by… |