vim Vulnerability Advisory Catalog

Total 246 security vulnerabilities recorded for vim software and firmware.

← Back to All Vendors
Component: vim

Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim interpolates the ty...

📅 2026-07-09
CVSS 7.8 Dossier →
Component: vim

Vim is an open source, command line text editor. Prior to 9.2.0725, the single-byte branch of spell_soundfold_sal() in src/spell.c translates a word t...

📅 2026-07-09
CVSS 5.5 Dossier →
Component: vim

Vim is an open source, command line text editor. Prior to 9.2.0736, the PHP omni-completion script in runtime/autoload/phpcomplete.vim interpolates a ...

📅 2026-07-09
CVSS 7.8 Dossier →
Component: vim

Vim is an open source, command line text editor. Prior to 9.2.0699, Vim's Python omni-completion (runtime/autoload/python3complete.vim and the legacy ...

📅 2026-06-25
CVSS 7.8 Dossier →
Component: vim

Vim is an open source, command line text editor. Prior to 9.2.0698, the single-byte branch of spell_soundfold_sofo() in src/spell.c translates a word ...

📅 2026-06-25
CVSS 7.8 Dossier →
Component: vim

Vim is an open source, command line text editor. From 9.2.0320 until 9.2.0679, a crafted undo or swap file can store a virtual-text property whose off...

📅 2026-06-25
CVSS 6.1 Dossier →
Component: vim

Vim is an open source, command line text editor. From 9.1.1784 until 9.2.0678, when the bundled zip plugin autoload/zip.vim falls back to PowerShell t...

📅 2026-06-25
CVSS 6.5 Dossier →
Component: vim

Vim is an open source, command line text editor. Prior to 9.2.0671, when Vim opens a file encrypted with the VimCrypt~04! or VimCrypt~05! method (xcha...

📅 2026-06-25
CVSS 5.5 Dossier →
Component: vim

Vim is an open source, command line text editor. Prior to 9.2.0670, get_text_props() in src/textprop.c reads a uint16 property count stored inline aft...

📅 2026-06-25
CVSS 5.3 Dossier →
Component: vim

Vim is an open source, command line text editor. Prior to 9.2.0663, a Vimscript code injection vulnerability exists in s:NetrwLocalRmFile() in the net...

📅 2026-06-25
CVSS 7.8 Dossier →
Component: vim

Vim is an open source, command line text editor. Prior to 9.2.0662, the dump_prefixes() function in src/spell.c walks a spell-file prefix trie iterati...

📅 2026-06-25
CVSS 5.5 Dossier →
Component: vim

Vim is an open source, command line text editor. Prior to 9.2.0653, the tree_count_words() function in src/spellfile.c fills in the word-count fields ...

📅 2026-06-25
CVSS 7.8 Dossier →
Component: vim

Vim is an open source, command line text editor. Prior to version 9.2.0597, Vim's Python omni-completion executes reconstructed function and class def...

📅 2026-06-11
CVSS 7.8 Dossier →
Component: vim

Vim is an open source, command line text editor. Prior to version 9.2.0565, the update_snapshot() function in src/terminal.c copies the visible termin...

📅 2026-06-11
CVSS 8.2 Dossier →
Component: vim

Vim is an open source, command line text editor. Prior to version 9.2.0561, the Python omni-completion script in python3complete.vim for Vim with the ...

📅 2026-06-11
CVSS 7.8 Dossier →
Component: vim

Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch() in the cucumber fil...

📅 2026-06-11
CVSS 5.3 Dossier →
Component: vim

Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave() i...

📅 2026-06-11
CVSS 8.8 Dossier →
Component: vim

Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tar#Vimuntar() in runtime/autoload/tar...

📅 2026-05-15
CVSS 3.6 Dossier →
Component: vim

Vim is an open source, command line text editor. Prior to version 9.2.0435, an OS command injection vulnerability exists in Vim's :find command-line c...

📅 2026-05-08
CVSS 5.3 Dossier →
Component: vim

Vim is an open source, command line text editor. Prior to version 9.2.0383, an OS command injection vulnerability exists in the netrw standard plugin ...

📅 2026-05-08
CVSS 4.4 Dossier →
Component: vim

Vim is an open source, command line text editor. Prior to 9.2.0357, A command injection vulnerability exists in Vim's tag file processing. When resolv...

📅 2026-04-24
CVSS 6.6 Dossier →
Component: vim

Vim is an open source, command line text editor. Prior to 9.2.0316, a command injection vulnerability in Vim's netbeans interface allows a malicious n...

📅 2026-04-08
CVSS 5.0 Dossier →
Component: vim

Vim is an open source, command line text editor. Prior to 9.2.0280, a path traversal bypass in Vim's zip.vim plugin allows overwriting of arbitrary fi...

📅 2026-04-06
CVSS 4.1 Dossier →
Component: vim

Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command execution whe...

📅 2026-04-06
CVSS 8.2 Dossier →
Page 1 of 11 (246 Total Records)