NE
Product
Neovim
31
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 21Medium 10Low 0
Watch
Add Neovim to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-25749 | 6.6 | Feb 6 | Heap Overflow in Vim Affected: through 0.11.6 |
| CVE-2023-1175 | 6.6 | Mar 4 | Incorrect Calculation of Buffer Size in vim/vim Affected: through 0.8.3 |
| CVE-2023-1170 | 6.6 | Mar 3 | Heap-based Buffer Overflow in vim/vim Affected: through 0.8.3 |
| CVE-2026-45130 | 5.5 | May 8 | Vim: Heap Buffer Overflow in spell file loading Affected: through 0.12.2 |
| CVE-2025-22134 | 5.5 | Jan 13 | heap-buffer-overflow with visual mode in Vim < 9.1.1003 Affected: through 0.10.4 |
| CVE-2026-11487 | 5.3 | Jun 8 | Neovim View Branch secure.lua M.read command injection Affected: 0.12.0; 0.12.1; 0.12.2 |
| CVE-2023-2426 | 5.3 | Apr 29 | Use of Out-of-range Pointer Offset in vim/vim Affected: 0.7.0 before 0.10.0 |
| CVE-2024-43374 | 4.7 | Aug 15 | Vim heap-use-after-free in src/arglist.c:207 Affected: through 0.10.4 |
| CVE-2023-48706 | 4.7 | Nov 22 | Vim has heap-use-after-free at /src/charset.c:1770:12 in skipwhite Affected: through 0.9.5 |
| CVE-2024-41965 | 4.2 | Aug 1 | Vim < v9.1.0648 has a double-free in dialog_changed() Affected: 0.10.0 before 0.10.2 |
Showing 10