Vim: OS Command Injection via 'path' completion

Vim double free in src/alloc.c:616

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499

In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces (e.g., Python, Ruby, or Lua)

use-after-free when closing buffers in Vim

Vim heap-use-after-free in src/arglist.c:207

Vim has heap-use-after-free at /src/charset.c:1770:12 in skipwhite

heap-buffer-overflow in ins_typebuf() in Vim < 9.1.0697

Vim: OS Command Injection in netrw

Vim has Heap-based Buffer Overflow and OOB Read in :terminal

Vim vulnerable to potential data loss with zip.vim and special crafted zip files

Use-After-Free in win_close() in vim

Floating point Exception in adjust_plines_for_skipcol() in vim

overflow with count for :s command in vim

overflow in nv_z_get_count in vim

overflow in ex address parsing in vim

overflow in get_number in vim

overflow in shift_line in vim

heap-use-after-free in function str_to_reg in vim/vim

Vim < v9.1.0648 has a double-free in dialog_changed()

Vim has path traversal issue with zip.vim and special crafted zip archives

Vim has path traversial issue with tar.vim and special crafted tar files