vim Vulnerability Advisory Catalog

Total 246 security vulnerabilities recorded for vim software and firmware.

← Back to All Vendors
CVE-2026-34714 CRITICAL
Component: vim

Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} injection...

📅 2026-03-30
CVSS 9.2 Dossier →
Component: vim

Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob() function on Unix-...

📅 2026-03-24
CVSS 5.6 Dossier →
Component: vim

Vim is an open source, command line text editor. From 9.1.0011 to before 9.2.0137, Vim's NFA regex compiler, when encountering a collection containing...

📅 2026-03-12
CVSS 5.3 Dossier →
Component: vim

Vim is an open source, command line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in `build_stl_str_hl()` when rendering a st...

📅 2026-02-27
CVSS 2.2 Dossier →
Component: vim

Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault (SEGV) exist in Vim's...

📅 2026-02-27
CVSS 5.3 Dossier →
Component: vim

Vim is an open source, command line text editor. Prior to version 9.2.0076, a heap-based buffer overflow WRITE and an out-of-bounds READ exist in Vim'...

📅 2026-02-27
CVSS 4.4 Dossier →
Component: vim

Vim is an open source, command line text editor. Prior to version 9.2.0075, a heap-based buffer underflow exists in Vim's Emacs-style tags file parsin...

📅 2026-02-27
CVSS 5.3 Dossier →
Component: vim

Vim is an open source, command line text editor. Prior to version 9.2.0074, a heap-based buffer overflow out-of-bounds read exists in Vim's Emacs-styl...

📅 2026-02-27
CVSS 4.4 Dossier →
Component: vim

Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the `netrw` standard plugi...

📅 2026-02-27
CVSS 4.4 Dossier →
Component: vim

Vim is an open source, command line text editor. Prior to 9.1.2148, a stack buffer overflow vulnerability exists in Vim's NetBeans integration when pr...

📅 2026-02-13
CVSS 5.4 Dossier →
Component: vim

Vim is an open source, command line text editor. Prior to version 9.1.1947, an uncontrolled search path vulnerability on Windows allows Vim to execute...

📅 2025-12-02
CVSS 7.8 Dossier →
CVE-2025-9390 MEDIUM
Component: vim

A security flaw has been discovered in vim up to 9.1.1615. Affected by this vulnerability is the function main of the file src/xxd/xxd.c of the compon...

📅 2025-08-24
CVSS 5.3 Dossier →
Component: vim

A vulnerability was identified in vim 9.1.0000. Affected is the function __memmove_avx_unaligned_erms of the file memmove-vec-unaligned-erms.S. The ma...

📅 2025-08-24
CVSS 3.3 Dossier →
Component: vim

Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1406, when processing nested tuples during Vim9 script import...

📅 2025-08-11
CVSS 8.8 Dossier →
Component: vim

Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1400, When processing nested tuples in Vim script, an error d...

📅 2025-08-11
CVSS 8.8 Dossier →
Component: vim

Vim is an open source, command line text editor. Prior to version 9.1.1551, a path traversal issue in Vim’s zip.vim plugin can allow overwriting of ar...

📅 2025-07-15
CVSS 4.1 Dossier →
Component: vim

Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in Vim’s tar.vim plugin can allow overwriting of ar...

📅 2025-07-15
CVSS 4.1 Dossier →
Component: vim

Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is mediu...

📅 2025-03-13
CVSS 4.4 Dossier →
Component: vim

Vim is an open source, command line text editor. Vim is distributed with the tar.vim plugin, that allows easy editing and viewing of (compressed or un...

📅 2025-03-03
CVSS 7.1 Dossier →
Component: vim

Vim is a greatly improved version of the good old UNIX editor Vi. Vim allows to redirect screen messages using the `:redir` ex command to register, va...

📅 2025-02-18
CVSS 4.2 Dossier →
Component: vim

A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipul...

📅 2025-02-12
CVSS 2.8 Dossier →
Component: vim

Vim is an open source, command line text editor. A segmentation fault was found in Vim before 9.1.1043. In silent Ex mode (-s -e), Vim typically doesn...

📅 2025-01-20
CVSS 4.2 Dossier →
Component: vim

Vim is an open source, command line text editor. A use-after-free was found in Vim < 9.1.0764. When closing a buffer (visible in a window) a BufWinLea...

📅 2024-10-07
CVSS 3.9 Dossier →
Component: vim

Vim is an open source, command line text editor. Patch v9.1.0038 optimized how the cursor position is calculated and removed a loop, that verified tha...

📅 2024-09-02
CVSS 4.5 Dossier →
Page 2 of 11 (246 Total Records)