VI
Vendor
vim
309
CVEs
0
On KEV
0
New 30D
Products
VI9.8
vim
vim
260 CVEs0 on KEV0 new
VI8.0
vim/vim
vim
44 CVEs0 on KEV0 new
GV7.8
Gvim
Vim
2 CVEs0 on KEV0 new
NE–
Netrw
Vim
1 CVEs0 on KEV0 new
TA–
Tar.vim
Vim
1 CVEs0 on KEV0 new
ZI–
Zipplugin.vim
Vim
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-43961 | VI vim vim | 7.8 | Aug 19 | Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution |
| CVE-2026-73073 | VI vim vim | 7.8 | Aug 18 | Vim: Arbitrary Ex Command Execution in C Omni-Completion |
| CVE-2026-73078 | VI vim vim | 8.8 | Aug 11 | Vim: Arbitrary Code Execution via Netrw Menu Construction |
| CVE-2026-73077 | VI vim vim | 7.8 | Aug 11 | Vim: Arbitrary Code Execution via Shell Keyword Lookup |
| CVE-2026-73076 | VI vim vim | 7.8 | Aug 11 | Vim: Arbitrary Command Execution via Malicious `.VimballRecord` Entry Replay in `vimball.vim` |
| CVE-2026-73075 | VI vim vim | 3.9 | Aug 11 | Vim: Out-of-bounds Access in Popup Opacity Handling |
| CVE-2026-73074 | VI vim vim | 6.7 | Aug 11 | Vim: Heap Buffer Overflow in Text Property Handling |
| CVE-2026-73072 | VI vim vim | 7.3 | Aug 11 | Vim: Heap Buffer Overflow when Loading a Spell File |
| CVE-2026-73071 | VI vim vim | 3.3 | Aug 11 | Vim: Use-after-free in JSON Decoding |
| CVE-2026-73070 | VI vim vim | 5.5 | Aug 11 | Vim: Stack Buffer Overflow in the Vim Socket Server |
| CVE-2026-51400 | VI Vim Vim | 8.4 | Aug 4 | An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vms_fixfilename() function within file vim/src/os_vms.c |
| CVE-2026-51401 | VI Vim Vim | 7.7 | Aug 4 | An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vms_fixfilename() function within file vim/src/os_vms.c |
| CVE-2026-59856 | VI vim vim | 7.8 | Jul 9 | Vim: Arbitrary Code Execution via PHP Omni-Completion |
| CVE-2026-59858 | VI vim vim | 7.8 | Jul 9 | Vim: Arbitrary Code Execution via C Omni-Completion |
| CVE-2026-59857 | VI vim vim | 5.5 | Jul 9 | Vim: Out-of-bounds Write in SAL Soundfolding |
| CVE-2026-55693 | VI vim vim | 7.8 | Jun 25 | Vim: Out-of-bounds Write in Spell File Word Count |
| CVE-2026-55892 | VI vim vim | 5.5 | Jun 25 | Vim: Out-of-bounds Write in Spell File Prefix Dump |
| CVE-2026-55895 | VI vim vim | 7.8 | Jun 25 | Vim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filename |
| CVE-2026-57451 | VI vim vim | 6.1 | Jun 25 | Vim: Out-of-bounds Read in Text Property Count |
| CVE-2026-57452 | VI vim vim | 5.5 | Jun 25 | Vim: Out-of-bounds Read with libsodium-encrypted Files |
| CVE-2026-57453 | VI vim vim | 7.3 | Jun 25 | Vim: PowerShell Command Injection via Unescaped Filename in zip.vim Extraction |
| CVE-2026-57454 | VI vim vim | 6.1 | Jun 25 | Vim: Out-of-bounds Read with Text Properties |
| CVE-2026-57455 | VI vim vim | 7.8 | Jun 25 | Vim: Stack out-of-bounds write in `spell_soundfold_sofo()` via an over-length `soundfold()` argument |
| CVE-2026-57456 | VI vim vim | 7.8 | Jun 25 | Vim: Arbitrary Code Execution via Python Omni-Completion Docstrings |
| CVE-2026-52860 | VI vim vim | 7.8 | Jun 11 | Vim: Arbitrary Code Execution via Python Omni-Completion |
| CVE-2026-52859 | VI vim vim | 8.2 | Jun 11 | Vim: Out-of-bounds Read in Terminal Screen Snapshot |
| CVE-2026-52858 | VI vim vim | 7.8 | Jun 11 | Vim: Arbitrary Code Execution via Python Omni-Completion |
| CVE-2026-47162 | VI vim vim | 8.8 | Jun 11 | Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name |
| CVE-2026-47167 | VI vim vim | 5.3 | Jun 11 | Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex |
| CVE-2026-46483 | VI vim vim | 7.0 | May 15 | Vim: Command injection in tar#Vimuntar via missing shellescape {special} flag |
| CVE-2026-45130 | VI vim vim | 5.5 | May 8 | Vim: Heap Buffer Overflow in spell file loading |
| CVE-2026-44656 | VI vim vim | 5.3 | May 8 | Vim: OS Command Injection via 'path' completion |
| CVE-2026-42307 | VI vim vim | 4.4 | May 8 | Vim: OS Command Injection in netrw |
| CVE-2026-41411 | VI vim vim | 6.6 | Apr 24 | Vim: Command injection via backtick expansion in tag filenames |
| CVE-2026-39881 | VI vim vim | 7.8 | Apr 8 | Vim Ex command injection in Vims NetBeans integration |
| CVE-2026-35177 | VI vim vim | 7.1 | Apr 6 | Path traversal issue with zip.vim in Vim |
| CVE-2026-34982 | VI vim vim | 8.2 | Apr 6 | Vim modeline bypass via various options affects Vim < 9.2.0276 |
| CVE-2026-34714 | VI Vim Vim | 8.6 | Mar 30 | Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} injection occurs with tabpanel lacking… |
| CVE-2026-33412 | VI Vim Vim | 7.3 | Mar 24 | Vim is an open source, command line text editor |
| CVE-2026-32249 | VI Vim Vim | 5.5 | Mar 12 | Vim is an open source, command line text editor |
| CVE-2026-28422 | VI Vim Vim | 2.2 | Feb 27 | Vim is an open source, command line text editor |
| CVE-2026-28421 | VI Vim Vim | 7.8 | Feb 27 | Vim is an open source, command line text editor |
| CVE-2026-28420 | VI Vim Vim | 4.4 | Feb 27 | Vim is an open source, command line text editor |
| CVE-2026-28419 | VI Vim Vim | 6.6 | Feb 27 | Vim is an open source, command line text editor |
| CVE-2026-28418 | VI Vim Vim | 5.5 | Feb 27 | Vim is an open source, command line text editor |
| CVE-2026-28417 | VI Vim Vim | 7.8 | Feb 27 | Vim is an open source, command line text editor |
| CVE-2026-26269 | VI Vim Vim | 7.5 | Feb 13 | Vim is an open source, command line text editor |
| CVE-2026-25749 | VI Vim Vim | 6.6 | Feb 6 | Vim is an open source, command line text editor |
| CVE-2025-66476 | VI Vim Vim | 7.8 | Dec 2 | Vim is an open source, command line text editor |
| CVE-2025-9390 | VI Vim Vim | 5.5 | Aug 24 | A security flaw has been discovered in vim up to 9.1.1615 |
| CVE-2025-9389 | VI Vim Vim | 5.5 | Aug 24 | A vulnerability was identified in vim 9.1.0000 |
| CVE-2025-55158 | VI Vim Vim | 8.8 | Aug 11 | Vim is an open source, command line text editor |
| CVE-2025-55157 | VI Vim Vim | 8.8 | Aug 11 | Vim is an open source, command line text editor |
| CVE-2025-53906 | VI Vim Vim | 4.1 | Jul 15 | Vim is an open source, command line text editor |
| CVE-2025-53905 | VI Vim Vim | 4.1 | Jul 15 | Vim is an open source, command line text editor |
| CVE-2025-29768 | VI Vim Vim | 4.4 | Mar 13 | Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198 |
| CVE-2025-27423 | VI Vim Vim | 7.1 | Mar 3 | Vim is an open source, command line text editor |
| CVE-2025-26603 | VI Vim Vim | 4.2 | Feb 18 | Vim is a greatly improved version of the good old UNIX editor Vi |
| CVE-2025-1215 | VI Vim Vim | 7.8 | Feb 12 | A vulnerability classified as problematic was found in vim up to 9.1.1096 |
| CVE-2025-24014 | VI Vim Vim | 5.5 | Jan 20 | Vim is an open source, command line text editor |
