VI
Vendor
vim
6 products with CVEs on record
310
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-43961
VI
vim
vim
7.8
0%
Aug 19Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution
CVE-2026-73073
VI
vim
vim
7.8
0%
Aug 18Vim: Arbitrary Ex Command Execution in C Omni-Completion
CVE-2026-73078
VI
vim
vim
8.8
0%
Aug 11Vim: Arbitrary Code Execution via Netrw Menu Construction
CVE-2026-73077
VI
vim
vim
7.8
0%
Aug 11Vim: Arbitrary Code Execution via Shell Keyword Lookup
CVE-2026-73076
VI
vim
vim
7.8
0%
Aug 11Vim: Arbitrary Command Execution via Malicious `.VimballRecord` Entry Replay in `vimball.vim`
CVE-2026-73075
VI
vim
vim
3.9
0%
Aug 11Vim: Out-of-bounds Access in Popup Opacity Handling
CVE-2026-73074
VI
vim
vim
6.7
0%
Aug 11Vim: Heap Buffer Overflow in Text Property Handling
CVE-2026-73072
VI
vim
vim
7.3
0%
Aug 11Vim: Heap Buffer Overflow when Loading a Spell File
CVE-2026-73071
VI
vim
vim
3.3
0%
Aug 11Vim: Use-after-free in JSON Decoding
CVE-2026-73070
VI
vim
vim
5.5
0%
Aug 11Vim: Stack Buffer Overflow in the Vim Socket Server
CVE-2026-51400
VI
Vim
Vim
8.4
0%
Aug 4An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vms_fixfilename() function within file vim/src/os_vms.c
CVE-2026-51401
VI
Vim
Vim
7.7
0%
Aug 4An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vms_fixfilename() function within file vim/src/os_vms.c
CVE-2026-59856
VI
vim
vim
7.8
0%
Jul 9Vim: Arbitrary Code Execution via PHP Omni-Completion
CVE-2026-59858
VI
vim
vim
7.8
0%
Jul 9Vim: Arbitrary Code Execution via C Omni-Completion
CVE-2026-59857
VI
vim
vim
5.5
0%
Jul 9Vim: Out-of-bounds Write in SAL Soundfolding
CVE-2026-55693
VI
vim
vim
7.8
0%
Jun 25Vim: Out-of-bounds Write in Spell File Word Count
CVE-2026-55892
VI
vim
vim
5.5
0%
Jun 25Vim: Out-of-bounds Write in Spell File Prefix Dump
CVE-2026-55895
VI
vim
vim
7.8
0%
Jun 25Vim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filename
CVE-2026-57451
VI
vim
vim
6.1
0%
Jun 25Vim: Out-of-bounds Read in Text Property Count
CVE-2026-57452
VI
vim
vim
5.5
0%
Jun 25Vim: Out-of-bounds Read with libsodium-encrypted Files
CVE-2026-57453
VI
vim
vim
7.3
0%
Jun 25Vim: PowerShell Command Injection via Unescaped Filename in zip.vim Extraction
CVE-2026-57454
VI
vim
vim
6.1
0%
Jun 25Vim: Out-of-bounds Read with Text Properties
CVE-2026-57455
VI
vim
vim
7.8
0%
Jun 25Vim: Stack out-of-bounds write in `spell_soundfold_sofo()` via an over-length `soundfold()` argument
CVE-2026-57456
VI
vim
vim
7.8
0%
Jun 25Vim: Arbitrary Code Execution via Python Omni-Completion Docstrings
CVE-2026-52860
VI
vim
vim
7.8
0%
Jun 11Vim: Arbitrary Code Execution via Python Omni-Completion
CVE-2026-52859
VI
vim
vim
8.2
0%
Jun 11Vim: Out-of-bounds Read in Terminal Screen Snapshot
CVE-2026-52858
VI
vim
vim
7.8
0%
Jun 11Vim: Arbitrary Code Execution via Python Omni-Completion
CVE-2026-47162
VI
vim
vim
8.8
0%
Jun 11Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name
CVE-2026-47167
VI
vim
vim
5.3
0%
Jun 11Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex
CVE-2026-46483
VI
vim
vim
7.0
1%
May 15Vim: Command injection in tar#Vimuntar via missing shellescape {special} flag
CVE-2026-45130
VI
vim
vim
5.5
0%
May 8Vim: Heap Buffer Overflow in spell file loading
CVE-2026-44656
VI
vim
vim
5.3
1%
May 8Vim: OS Command Injection via 'path' completion
CVE-2026-42307
VI
vim
vim
4.4
1%
May 8Vim: OS Command Injection in netrw
CVE-2026-41411
VI
vim
vim
6.6
1%
Apr 24Vim: Command injection via backtick expansion in tag filenames
CVE-2026-39881
VI
vim
vim
7.8
1%
Apr 8Vim Ex command injection in Vims NetBeans integration
CVE-2026-35177
VI
vim
vim
7.1
0%
Apr 6Path traversal issue with zip.vim in Vim
CVE-2026-34982
VI
vim
vim
8.2
0%
Apr 6Vim modeline bypass via various options affects Vim < 9.2.0276
CVE-2026-34714
VI
Vim
Vim
8.6
1%
Mar 30Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} injection occurs with tabpanel lacking…
CVE-2026-33412
VI
vim
vim
7.3
1%
Mar 24Vim affected by Command injection via newline in glob()
CVE-2026-32249
VI
vim
vim
5.5
0%
Mar 12NFA regex engine NULL pointer dereference affects Vim < 9.2.0137
CVE-2026-28422
VI
vim
vim
2.2
0%
Feb 27Vim has stack-buffer-overflow in build_stl_str_hl()
CVE-2026-28421
VI
vim
vim
7.8
0%
Feb 27Vim has a heap-buffer-overflow and a segmentation fault
CVE-2026-28420
VI
vim
vim
4.4
0%
Feb 27Vim has Heap-based Buffer Overflow and OOB Read in :terminal
CVE-2026-28419
VI
vim
vim
6.6
0%
Feb 27Vim has Heap-based Buffer Underflow in Emacs tags parsing
CVE-2026-28418
VI
vim
vim
5.5
0%
Feb 27Vim has Heap-based Buffer Overflow in Emacs tags parsing
CVE-2026-28417
VI
vim
vim
7.8
1%
Feb 27Vim has OS Command Injection in netrw
CVE-2026-26269
VI
vim
vim
7.5
0%
Feb 13Vim has a Netbeans specialKeys Stack Buffer Overflow
CVE-2026-25749
VI
vim
vim
6.6
0%
Feb 6Heap Overflow in Vim
CVE-2025-66476
VI
vim
vim
7.8
0%
Dec 2Vim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerability
CVE-2025-9390
VI
Vim
Vim
5.5
0%
Aug 24vim xxd xxd.c main buffer overflow
CVE-2025-9389
VI
Vim
Vim
5.5
0%
Aug 24vim memmove-vec-unaligned-erms.S __memmove_avx_unaligned_erms memory corruption
CVE-2025-55157
VI
vim
vim
8.8
0%
Aug 11Vim heap use-after-free vulnerability when processing recursive tuple data types
CVE-2025-55158
VI
vim
vim
8.8
0%
Aug 11Vim double-free vulnerability during Vim9 script import operations
CVE-2025-53906
VI
vim
vim
4.1
1%
Jul 15Vim has path traversal issue with zip.vim and special crafted zip archives
CVE-2025-53905
VI
vim
vim
4.1
0%
Jul 15Vim has path traversial issue with tar.vim and special crafted tar files
CVE-2025-29768
VI
vim
vim
4.4
0%
Mar 13Vim vulnerable to potential data loss with zip.vim and special crafted zip files
CVE-2025-27423
VI
vim
vim
7.1
22%
Mar 3Improper Input Validation in Vim
CVE-2025-26603
VI
vim
vim
4.2
0%
Feb 18heap-use-after-free in function str_to_reg in vim/vim
CVE-2025-1215
VI
Vim
Vim
7.8
1%
Feb 12vim main.c memory corruption
CVE-2025-24014
VI
vim
vim
5.5
0%
Jan 20segmentation fault in win_line() in Vim < 9.1.1043