CVEs we hold for Vim

Records whose assigning authority named Vim as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-73078Vim: Arbitrary Code Execution via Netrw Menu Constructionvim

CVE-2026-73077Vim: Arbitrary Code Execution via Shell Keyword Lookupvim

CVE-2026-73076Vim: Arbitrary Command Execution via Malicious `.VimballRecord` Entry Replay in `vimball.vim`vim

CVE-2026-73075Vim: Out-of-bounds Access in Popup Opacity Handlingvim

CVE-2026-73074Vim: Heap Buffer Overflow in Text Property Handlingvim

CVE-2026-73073Vim: Arbitrary Ex Command Execution in C Omni-Completionvim

CVE-2026-73072Vim: Heap Buffer Overflow when Loading a Spell Filevim

CVE-2026-73071Vim: Use-after-free in JSON Decodingvim

CVE-2026-73070Vim: Stack Buffer Overflow in the Vim Socket Servervim

CVE-2026-65543WordPress Vimeo plugin <= 1.2.2 - Sensitive Data Exposure vulnerabilityvimeodev Vimeo

CVE-2026-59858Vim: Arbitrary Code Execution via C Omni-Completionvim

CVE-2026-59857Vim: Out-of-bounds Write in SAL Soundfoldingvim

CVE-2026-59856Vim: Arbitrary Code Execution via PHP Omni-Completionvim

CVE-2026-57456Vim: Arbitrary Code Execution via Python Omni-Completion Docstringsvim

CVE-2026-57455Vim: Stack out-of-bounds write in `spell_soundfold_sofo()` via an over-length `soundfold()` argumentvim

CVE-2026-57454Vim: Out-of-bounds Read with Text Propertiesvim

CVE-2026-57453Vim: PowerShell Command Injection via Unescaped Filename in zip.vim Extractionvim

CVE-2026-57452Vim: Out-of-bounds Read with libsodium-encrypted Filesvim

CVE-2026-57451Vim: Out-of-bounds Read in Text Property Countvim

CVE-2026-55895Vim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filenamevim

CVE-2026-55892Vim: Out-of-bounds Write in Spell File Prefix Dumpvim

CVE-2026-55693Vim: Out-of-bounds Write in Spell File Word Countvim

CVE-2026-52860Vim: Arbitrary Code Execution via Python Omni-Completionvim

CVE-2026-52859Vim: Out-of-bounds Read in Terminal Screen Snapshotvim

CVE-2026-52858Vim: Arbitrary Code Execution via Python Omni-Completionvim

CVE-2026-47167Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regexvim

CVE-2026-47162Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory namevim

CVE-2026-46483Vim: Command injection in tar#Vimuntar via missing shellescape {special} flagvim

CVE-2026-45130Vim: Heap Buffer Overflow in spell file loadingvim

CVE-2026-44656Vim: OS Command Injection via 'path' completionvim

CVE-2026-43961Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code…vim; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux…

CVE-2026-42307Vim: OS Command Injection in netrwvim

CVE-2026-41411Vim: Command injection via backtick expansion in tag filenamesvim

CVE-2026-39881Vim Ex command injection in Vims NetBeans integrationvim

CVE-2026-35177Path traversal issue with zip.vim in Vimvim

CVE-2026-34982Vim modeline bypass via various options affects Vim < 9.2.0276vim

CVE-2026-34714no title heldVim

CVE-2026-33412Vim affected by Command injection via newline in glob()vim

CVE-2026-32249NFA regex engine NULL pointer dereference affects Vim < 9.2.0137vim

CVE-2026-28422Vim has stack-buffer-overflow in build_stl_str_hl()vim

CVE-2026-28421Vim has a heap-buffer-overflow and a segmentation faultvim

CVE-2026-28420Vim has Heap-based Buffer Overflow and OOB Read in :terminalvim

CVE-2026-28419Vim has Heap-based Buffer Underflow in Emacs tags parsingvim

CVE-2026-28418Vim has Heap-based Buffer Overflow in Emacs tags parsingvim

CVE-2026-28417Vim has OS Command Injection in netrwvim

CVE-2026-26269Vim has a Netbeans specialKeys Stack Buffer Overflowvim

CVE-2026-25749Heap Overflow in Vimvim

CVE-2026-12694Missing Authorization in Vimesoft's Enterprise Video PlatformVimesoft Inc. Enterprise Video Platform

CVE-2026-12693IDOR in Vimesoft's Enterprise Video PlatformVimesoft Inc. Enterprise Video Platform

CVE-2026-12692Improper Authentication in Vimesoft's Enterprise Video PlatformVimesoft Inc. Enterprise Video Platform

CVE-2026-12691Authentication Bypass in Vimesoft's Enterprise Video PlatformVimesoft Inc. Enterprise Video Platform

CVE-2025-9390vim xxd xxd.c main buffer overflown/a vim

CVE-2025-9389vim memmove-vec-unaligned-erms.S __memmove_avx_unaligned_erms memory corruptionn/a vim

CVE-2025-66476Vim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerabilityvim

CVE-2025-55158Vim double-free vulnerability during Vim9 script import operationsvim

CVE-2025-55157Vim heap use-after-free vulnerability when processing recursive tuple data typesvim

CVE-2025-53906Vim has path traversal issue with zip.vim and special crafted zip archivesvim

CVE-2025-53905Vim has path traversial issue with tar.vim and special crafted tar filesvim

CVE-2025-31563WordPress AI Search Bar plugin <= 2.1 - Cross Site Scripting (XSS) vulnerabilityVimal Kava AI Search Bar

CVE-2025-29768Vim vulnerable to potential data loss with zip.vim and special crafted zip filesvim

CVE-2025-27423Improper Input Validation in Vimvim

CVE-2025-26603heap-use-after-free in function str_to_reg in vim/vimvim

CVE-2025-24014segmentation fault in win_line() in Vim < 9.1.1043vim

CVE-2025-23467WordPress RSS News Scroller plugin <= 2.0.0 - CSRF to Stored XSS vulnerabilityvimal.ghorecha RSS News Scroller

CVE-2025-22134heap-buffer-overflow with visual mode in Vim < 9.1.1003vim

CVE-2025-1215vim main.c memory corruptionn/a vim

CVE-2025-11025Information Disclosure in Vimeosoft Information Technologies' Vimesoft Corporate Messaging PlatformVimesoft Corporate Messaging Platform

CVE-2024-9692Improper Access Control in Input in VIMESA VHF/FM Transmitter Blue PlusVIMESA VHF/FM Transmitter Blue Plus

CVE-2024-47814use-after-free when closing buffers in Vimvim

CVE-2024-45306heap-buffer-overflow in Vimvim

CVE-2024-43802heap-buffer-overflow in ins_typebuf() in Vim < 9.1.0697vim

CVE-2024-43790heap-buffer-overflow in do_search() in Vim < 9.1.0689vim

CVE-2024-43374Vim heap-use-after-free in src/arglist.c:207vim

CVE-2024-41965Vim < v9.1.0648 has a double-free in dialog_changed()vim

CVE-2024-41957Vim double free in src/alloc.c:616vim

CVE-2023-5535Use After Free in vim/vimvim/vim

CVE-2023-5441NULL Pointer Dereference in vim/vimvim/vim

CVE-2023-5344Heap-based Buffer Overflow in vim/vimvim/vim

CVE-2023-48706Vim has heap-use-after-free at /src/charset.c:1770:12 in skipwhitevim

CVE-2023-48237overflow in shift_line in vimvim

CVE-2023-48236overflow in get_number in vimvim

CVE-2023-48235overflow in ex address parsing in vimvim

CVE-2023-48234overflow in nv_z_get_count in vimvim

CVE-2023-48233overflow with count for :s command in vimvim

CVE-2023-48232Floating point Exception in adjust_plines_for_skipcol() in vimvim

CVE-2023-48231Use-After-Free in win_close() in vimvim

CVE-2023-4781Heap-based Buffer Overflow in vim/vimvim/vim

CVE-2023-4752Use After Free in vim/vimvim/vim

CVE-2023-4751Heap-based Buffer Overflow in vim/vimvim/vim

CVE-2023-4750Use After Free in vim/vimvim/vim

CVE-2023-4738Heap-based Buffer Overflow in vim/vimvim/vim

CVE-2023-4736Untrusted Search Path in vim/vimvim/vim

CVE-2023-4735Out-of-bounds Write in vim/vimvim/vim

CVE-2023-4734Integer Overflow or Wraparound in vim/vimvim/vim

CVE-2023-4733Use After Free in vim/vimvim/vim

CVE-2023-46246Integer Overflow in :history command in Vimvim

CVE-2023-2610Integer Overflow or Wraparound in vim/vimvim/vim

CVE-2023-2609NULL Pointer Dereference in vim/vimvim/vim

CVE-2023-2426Use of Out-of-range Pointer Offset in vim/vimvim/vim

CVE-2023-1355NULL Pointer Dereference in vim/vimvim/vim

CVE-2023-1264NULL Pointer Dereference in vim/vimvim/vim

CVE-2023-1175Incorrect Calculation of Buffer Size in vim/vimvim/vim

CVE-2023-1170Heap-based Buffer Overflow in vim/vimvim/vim

CVE-2023-1127Divide By Zero in vim/vimvim/vim

CVE-2023-0512Divide By Zero in vim/vimvim/vim

CVE-2023-0433Heap-based Buffer Overflow in vim/vimvim/vim

CVE-2023-0288Heap-based Buffer Overflow in vim/vimvim/vim

CVE-2023-0153Vimeo Video Autoplay Automute <= 1.0 - Contributor+ Stored XSSUnknown Vimeo Video Autoplay Automute

CVE-2023-0054Out-of-bounds Write in vim/vimvim/vim

CVE-2023-0051Heap-based Buffer Overflow in vim/vimvim/vim

CVE-2023-0049Out-of-bounds Read in vim/vimvim/vim

CVE-2022-4293Floating Point Comparison with Incorrect Operator in vim/vimvim/vim

CVE-2022-4292Use After Free in vim/vimvim/vim

CVE-2022-4141Heap-based Buffer Overflow in vim/vimvim/vim

CVE-2022-3591Use After Free in vim/vimvim/vim

CVE-2022-3520Heap-based Buffer Overflow in vim/vimvim/vim

CVE-2022-3491Heap-based Buffer Overflow in vim/vimvim/vim

CVE-2022-3352Use After Free in vim/vimvim/vim

CVE-2022-3324Stack-based Buffer Overflow in vim/vimvim/vim

CVE-2022-3297Use After Free in vim/vimvim/vim

CVE-2022-3296Stack-based Buffer Overflow in vim/vimvim/vim

CVE-2022-3278NULL Pointer Dereference in vim/vimvim/vim

CVE-2022-3256Use After Free in vim/vimvim/vim

CVE-2022-3235Use After Free in vim/vimvim/vim

CVE-2022-3234Heap-based Buffer Overflow in vim/vimvim/vim

CVE-2022-3153NULL Pointer Dereference in vim/vimvim/vim

CVE-2022-3134Use After Free in vim/vimvim/vim

CVE-2022-3099Use After Free in vim/vimvim/vim

CVE-2022-3037Use After Free in vim/vimvim/vim

CVE-2022-3016Use After Free in vim/vimvim/vim

CVE-2022-2982Use After Free in vim/vimvim/vim

CVE-2022-2980NULL Pointer Dereference in vim/vimvim/vim

CVE-2022-2946Use After Free in vim/vimvim/vim

CVE-2022-2923NULL Pointer Dereference in vim/vimvim/vim

CVE-2022-2889Use After Free in vim/vimvim/vim

CVE-2022-2874NULL Pointer Dereference in vim/vimvim/vim

CVE-2022-2862Use After Free in vim/vimvim/vim

CVE-2022-2849Heap-based Buffer Overflow in vim/vimvim/vim

CVE-2022-2845Improper Validation of Specified Quantity in Input in vim/vimvim/vim

CVE-2022-2819Heap-based Buffer Overflow in vim/vimvim/vim

CVE-2022-2817Use After Free in vim/vimvim/vim

CVE-2022-2816Out-of-bounds Read in vim/vimvim/vim

CVE-2022-2598Out-of-bounds Write to API in vim/vimvim/vim

CVE-2022-2581Out-of-bounds Read in vim/vimvim/vim

CVE-2022-2580Heap-based Buffer Overflow in vim/vimvim/vim

CVE-2022-2571Heap-based Buffer Overflow in vim/vimvim/vim

CVE-2022-2522Heap-based Buffer Overflow in vim/vimvim/vim

CVE-2022-2345Use After Free in vim/vimvim/vim

CVE-2022-2344Heap-based Buffer Overflow in vim/vimvim/vim

CVE-2022-2343Heap-based Buffer Overflow in vim/vimvim/vim

CVE-2022-2304Stack-based Buffer Overflow in vim/vimvim/vim

CVE-2022-2289Use After Free in vim/vimvim/vim

CVE-2022-2288Out-of-bounds Write in vim/vimvim/vim

CVE-2022-2287Out-of-bounds Read in vim/vimvim/vim

CVE-2022-2286Out-of-bounds Read in vim/vimvim/vim

CVE-2022-2285Integer Overflow or Wraparound in vim/vimvim/vim

CVE-2022-2284Heap-based Buffer Overflow in vim/vimvim/vim

CVE-2022-2264Heap-based Buffer Overflow in vim/vimvim/vim

CVE-2022-2257Out-of-bounds Read in vim/vimvim/vim

CVE-2022-2231NULL Pointer Dereference in vim/vimvim/vim

CVE-2022-2210Out-of-bounds Write in vim/vimvim/vim

CVE-2022-2208NULL Pointer Dereference in vim/vimvim/vim

CVE-2022-2207Heap-based Buffer Overflow in vim/vimvim/vim

CVE-2022-2206Out-of-bounds Read in vim/vimvim/vim

CVE-2022-2183Out-of-bounds Read in vim/vimvim/vim

CVE-2022-2182Heap-based Buffer Overflow in vim/vimvim/vim

CVE-2022-2175Buffer Over-read in vim/vimvim/vim

CVE-2022-2129Out-of-bounds Write in vim/vimvim/vim

CVE-2022-2126Out-of-bounds Read in vim/vimvim/vim

CVE-2022-2125Heap-based Buffer Overflow in vim/vimvim/vim

CVE-2022-2124Buffer Over-read in vim/vimvim/vim

CVE-2022-2042Use After Free in vim/vimvim/vim

CVE-2022-2000Out-of-bounds Write in vim/vimvim/vim

CVE-2022-1968Use After Free in vim/vimvim/vim

CVE-2022-1942Heap-based Buffer Overflow in vim/vimvim/vim

CVE-2022-1927Buffer Over-read in vim/vimvim/vim

CVE-2022-1898Use After Free in vim/vimvim/vim

CVE-2022-1897Out-of-bounds Write in vim/vimvim/vim

CVE-2022-1886Heap-based Buffer Overflow in vim/vimvim/vim

CVE-2022-1851Out-of-bounds Read in vim/vimvim/vim

CVE-2022-1796Use After Free in vim/vimvim/vim

CVE-2022-1785Out-of-bounds Write in vim/vimvim/vim

CVE-2022-1771Uncontrolled Recursion in vim/vimvim/vim

CVE-2022-1769Buffer Over-read in vim/vimvim/vim

CVE-2022-1735Classic Buffer Overflow in vim/vimvim/vim

CVE-2022-1733Heap-based Buffer Overflow in vim/vimvim/vim

CVE-2022-1725NULL Pointer Dereference in vim/vimvim/vim

CVE-2022-1720Buffer Over-read in function grab_file_name in vim/vimvim/vim

CVE-2022-1674NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in vim/vimvim/vim

CVE-2022-1629Buffer Over-read in function find_next_quote in vim/vimvim/vim

CVE-2022-1621Heap buffer overflow in vim_strncpy find_word in vim/vimvim/vim

CVE-2022-1620NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in vim/vimvim/vim

CVE-2022-1619Heap-based Buffer Overflow in function cmdline_erase_chars in vim/vimvim/vim

CVE-2022-1616Use after free in append_command in vim/vimvim/vim

CVE-2022-1420Use of Out-of-range Pointer Offset in vim/vimvim/vim

CVE-2022-1381global heap buffer overflow in skip_range in vim/vimvim/vim

CVE-2022-1160heap buffer overflow in get_one_sourceline in vim/vimvim/vim

CVE-2022-1154Use after free in utf_ptr2char in vim/vimvim/vim

CVE-2022-0943Heap-based Buffer Overflow occurs in vim in vim/vimvim/vim

CVE-2022-0729Use of Out-of-range Pointer Offset in vim/vimvim/vim

200 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.