# vim.

Every CVE that names vim among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution](https://agentprime.io/advisories/CVE-2026-43961.md)
  `CVE-2026-43961` · CVE record: vim vim and 4 more · CVSS 7.8 High · Not analysed yet · Published 19 Aug 2026 · Tags: Code injection
- [Vim: Arbitrary Ex Command Execution in C Omni-Completion](https://agentprime.io/advisories/CVE-2026-73073.md)
  `CVE-2026-73073` · CVE record: vim vim · CVSS 7.1 High · Not analysed yet · Published 18 Aug 2026 · Tags: Code injection, CWE-829
- [Vim: Arbitrary Code Execution via Netrw Menu Construction](https://agentprime.io/advisories/CVE-2026-73078.md)
  `CVE-2026-73078` · CVE record: vim vim · CVSS 8.6 High · Not analysed yet · Published 11 Aug 2026 · Tags: Command injection, CWE-184
- [Vim: Arbitrary Code Execution via Shell Keyword Lookup](https://agentprime.io/advisories/CVE-2026-73077.md)
  `CVE-2026-73077` · CVE record: vim vim · CVSS 8.4 High · Not analysed yet · Published 11 Aug 2026 · Tags: Command injection
- [Vim: Arbitrary Command Execution via Malicious \`.VimballRecord\` Entry Replay in \`vimball.vim\`](https://agentprime.io/advisories/CVE-2026-73076.md)
  `CVE-2026-73076` · CVE record: vim vim · CVSS 8.4 High · Not analysed yet · Published 11 Aug 2026 · Tags: Code injection, CWE-829
- [Vim: Out-of-bounds Access in Popup Opacity Handling](https://agentprime.io/advisories/CVE-2026-73075.md)
  `CVE-2026-73075` · CVE record: vim vim · CVSS 4.6 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Memory corruption
- [Vim: Heap Buffer Overflow in Text Property Handling](https://agentprime.io/advisories/CVE-2026-73074.md)
  `CVE-2026-73074` · CVE record: vim vim · CVSS 7.1 High · Not analysed yet · Published 11 Aug 2026 · Tags: Memory corruption
- [Vim: Heap Buffer Overflow when Loading a Spell File](https://agentprime.io/advisories/CVE-2026-73072.md)
  `CVE-2026-73072` · CVE record: vim vim · CVSS 8.5 High · Not analysed yet · Published 11 Aug 2026 · Tags: Memory corruption
- [Vim: Use-after-free in JSON Decoding](https://agentprime.io/advisories/CVE-2026-73071.md)
  `CVE-2026-73071` · CVE record: vim vim · CVSS 3.3 Low · Not analysed yet · Published 11 Aug 2026 · Tags: Memory corruption
- [Vim: Stack Buffer Overflow in the Vim Socket Server](https://agentprime.io/advisories/CVE-2026-73070.md)
  `CVE-2026-73070` · CVE record: vim vim · CVSS 6.8 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Memory corruption
- [Vim: Arbitrary Code Execution via PHP Omni-Completion](https://agentprime.io/advisories/CVE-2026-59856.md)
  `CVE-2026-59856` · CVE record: vim vim · CVSS 8.4 High · Not analysed yet · Published 9 Jul 2026 · Tags: Code injection
- [Vim: Arbitrary Code Execution via C Omni-Completion](https://agentprime.io/advisories/CVE-2026-59858.md)
  `CVE-2026-59858` · CVE record: vim vim · CVSS 8.4 High · Not analysed yet · Published 9 Jul 2026 · Tags: Code injection
- [Vim: Out-of-bounds Write in SAL Soundfolding](https://agentprime.io/advisories/CVE-2026-59857.md)
  `CVE-2026-59857` · CVE record: vim vim · CVSS 5.6 Medium · Not analysed yet · Published 9 Jul 2026 · Tags: Memory corruption
- [Vim: Out-of-bounds Write in Spell File Word Count](https://agentprime.io/advisories/CVE-2026-55693.md)
  `CVE-2026-55693` · CVE record: vim vim · CVSS 5.7 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Memory corruption
- [Vim: Out-of-bounds Write in Spell File Prefix Dump](https://agentprime.io/advisories/CVE-2026-55892.md)
  `CVE-2026-55892` · CVE record: vim vim · CVSS 5.5 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Memory corruption
- [Vim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filename](https://agentprime.io/advisories/CVE-2026-55895.md)
  `CVE-2026-55895` · CVE record: vim vim · CVSS 5.7 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Command injection, Code injection
- [Vim: Out-of-bounds Read in Text Property Count](https://agentprime.io/advisories/CVE-2026-57451.md)
  `CVE-2026-57451` · CVE record: vim vim · CVSS 5.3 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Memory corruption
- [Vim: Out-of-bounds Read with libsodium-encrypted Files](https://agentprime.io/advisories/CVE-2026-57452.md)
  `CVE-2026-57452` · CVE record: vim vim · CVSS 5.5 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Memory corruption
- [Vim: PowerShell Command Injection via Unescaped Filename in zip.vim Extraction](https://agentprime.io/advisories/CVE-2026-57453.md)
  `CVE-2026-57453` · CVE record: vim vim · CVSS 6.5 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Command injection
- [Vim: Out-of-bounds Read with Text Properties](https://agentprime.io/advisories/CVE-2026-57454.md)
  `CVE-2026-57454` · CVE record: vim vim · CVSS 6.8 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Memory corruption
- [Vim: Stack out-of-bounds write in \`spell_soundfold_sofo()\` via an over-length \`soundfold()\` argument](https://agentprime.io/advisories/CVE-2026-57455.md)
  `CVE-2026-57455` · CVE record: vim vim · CVSS 4.0 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Memory corruption
- [Vim: Arbitrary Code Execution via Python Omni-Completion Docstrings](https://agentprime.io/advisories/CVE-2026-57456.md)
  `CVE-2026-57456` · CVE record: vim vim · CVSS 8.4 High · Not analysed yet · Published 25 Jun 2026 · Tags: Code injection
- [Vim: Arbitrary Code Execution via Python Omni-Completion](https://agentprime.io/advisories/CVE-2026-52860.md)
  `CVE-2026-52860` · CVE record: vim vim · CVSS 7.5 High · Not analysed yet · Published 11 Jun 2026 · Tags: Code injection
- [Vim: Out-of-bounds Read in Terminal Screen Snapshot](https://agentprime.io/advisories/CVE-2026-52859.md)
  `CVE-2026-52859` · CVE record: vim vim · CVSS 6.9 Medium · Not analysed yet · Published 11 Jun 2026 · Tags: Memory corruption
- [Vim: Arbitrary Code Execution via Python Omni-Completion](https://agentprime.io/advisories/CVE-2026-52858.md)
  `CVE-2026-52858` · CVE record: vim vim · CVSS 7.3 High · Not analysed yet · Published 11 Jun 2026 · Tags: Code injection, CWE-829
- [Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name](https://agentprime.io/advisories/CVE-2026-47162.md)
  `CVE-2026-47162` · CVE record: vim vim · CVSS 7.3 High · Not analysed yet · Published 11 Jun 2026 · Tags: Other injection, Code injection, CWE-140
- [Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex](https://agentprime.io/advisories/CVE-2026-47167.md)
  `CVE-2026-47167` · CVE record: vim vim · CVSS 5.1 Medium · Not analysed yet · Published 11 Jun 2026 · Tags: Code injection
- [Vim: Command injection in tar#Vimuntar via missing shellescape {special} flag](https://agentprime.io/advisories/CVE-2026-46483.md)
  `CVE-2026-46483` · CVE record: vim vim · CVSS 3.6 Low · Not analysed yet · Published 15 May 2026 · Tags: Command injection
- [Vim: Heap Buffer Overflow in spell file loading](https://agentprime.io/advisories/CVE-2026-45130.md)
  `CVE-2026-45130` · CVE record: vim vim · CVSS 6.6 Medium · Not analysed yet · Published 8 May 2026 · Tags: Memory corruption
- [Vim: OS Command Injection via 'path' completion](https://agentprime.io/advisories/CVE-2026-44656.md)
  `CVE-2026-44656` · CVE record: vim vim · CVSS 4.6 Medium · Not analysed yet · Published 8 May 2026 · Tags: Command injection
- [Vim: OS Command Injection in netrw](https://agentprime.io/advisories/CVE-2026-42307.md)
  `CVE-2026-42307` · CVE record: vim vim · CVSS 4.4 Medium · Not analysed yet · Published 8 May 2026 · Tags: Command injection
- [Vim: Command injection via backtick expansion in tag filenames](https://agentprime.io/advisories/CVE-2026-41411.md)
  `CVE-2026-41411` · CVE record: vim vim · CVSS 6.6 Medium · Not analysed yet · Published 24 Apr 2026 · Tags: Command injection
- [Vim Ex command injection in Vims NetBeans integration](https://agentprime.io/advisories/CVE-2026-39881.md)
  `CVE-2026-39881` · CVE record: vim vim · CVSS 5.0 Medium · Not analysed yet · Published 8 Apr 2026 · Tags: Code injection
- [Path traversal issue with zip.vim in Vim](https://agentprime.io/advisories/CVE-2026-35177.md)
  `CVE-2026-35177` · CVE record: vim vim · CVSS 4.1 Medium · Not analysed yet · Published 6 Apr 2026 · Tags: Path traversal
- [Vim modeline bypass via various options affects Vim < 9.2.0276](https://agentprime.io/advisories/CVE-2026-34982.md)
  `CVE-2026-34982` · CVE record: vim vim · CVSS 8.2 High · Not analysed yet · Published 6 Apr 2026 · Tags: Command injection
- [OS command injection in Vim](https://agentprime.io/advisories/CVE-2026-34714.md)
  `CVE-2026-34714` · CVE record: Vim Vim · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Mar 2026 · Tags: Command injection, Code injection
- [Vim affected by Command injection via newline in glob()](https://agentprime.io/advisories/CVE-2026-33412.md)
  `CVE-2026-33412` · CVE record: vim vim · CVSS 5.6 Medium · Not analysed yet · Published 24 Mar 2026 · Tags: Command injection
- [NFA regex engine NULL pointer dereference affects Vim < 9.2.0137](https://agentprime.io/advisories/CVE-2026-32249.md)
  `CVE-2026-32249` · CVE record: vim vim · CVSS 5.3 Medium · Not analysed yet · Published 12 Mar 2026 · Tags: Memory corruption
- [Vim has stack-buffer-overflow in build_stl_str_hl()](https://agentprime.io/advisories/CVE-2026-28422.md)
  `CVE-2026-28422` · CVE record: vim vim · CVSS 2.2 Low · Not analysed yet · Published 27 Feb 2026 · Tags: Memory corruption
- [Vim has a heap-buffer-overflow and a segmentation fault](https://agentprime.io/advisories/CVE-2026-28421.md)
  `CVE-2026-28421` · CVE record: vim vim · CVSS 5.3 Medium · Not analysed yet · Published 27 Feb 2026 · Tags: Memory corruption, CWE-20
- [Vim has Heap-based Buffer Overflow and OOB Read in :terminal](https://agentprime.io/advisories/CVE-2026-28420.md)
  `CVE-2026-28420` · CVE record: vim vim · CVSS 4.4 Medium · Not analysed yet · Published 27 Feb 2026 · Tags: Memory corruption
- [Vim has Heap-based Buffer Underflow in Emacs tags parsing](https://agentprime.io/advisories/CVE-2026-28419.md)
  `CVE-2026-28419` · CVE record: vim vim · CVSS 5.3 Medium · Not analysed yet · Published 27 Feb 2026 · Tags: Memory corruption
- [Vim has Heap-based Buffer Overflow in Emacs tags parsing](https://agentprime.io/advisories/CVE-2026-28418.md)
  `CVE-2026-28418` · CVE record: vim vim · CVSS 4.4 Medium · Not analysed yet · Published 27 Feb 2026 · Tags: Memory corruption
- [Vim has OS Command Injection in netrw](https://agentprime.io/advisories/CVE-2026-28417.md)
  `CVE-2026-28417` · CVE record: vim vim · CVSS 4.4 Medium · Not analysed yet · Published 27 Feb 2026 · Tags: CWE-86
- [Vim has a Netbeans specialKeys Stack Buffer Overflow](https://agentprime.io/advisories/CVE-2026-26269.md)
  `CVE-2026-26269` · CVE record: vim vim · CVSS 5.4 Medium · Not analysed yet · Published 13 Feb 2026 · Tags: Memory corruption
- [Heap Overflow in Vim](https://agentprime.io/advisories/CVE-2026-25749.md)
  `CVE-2026-25749` · CVE record: vim vim · CVSS 6.6 Medium · Not analysed yet · Published 6 Feb 2026 · Tags: Memory corruption
- [Vim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-66476.md)
  `CVE-2025-66476` · CVE record: vim vim · CVSS 7.8 High · Not analysed yet · Published 2 Dec 2025 · Tags: CWE-427
- [vim xxd xxd.c main buffer overflow](https://agentprime.io/advisories/CVE-2025-9390.md)
  `CVE-2025-9390` · CVE record: vim · CVSS 4.8 Medium · Not analysed yet · Published 24 Aug 2025 · Tags: Memory corruption
- [vim memmove-vec-unaligned-erms.S \_\_memmove_avx_unaligned_erms memory corruption](https://agentprime.io/advisories/CVE-2025-9389.md)
  `CVE-2025-9389` · CVE record: vim · CVSS 4.8 Medium · Not analysed yet · Published 24 Aug 2025 · Tags: Memory corruption
- [Vim heap use-after-free vulnerability when processing recursive tuple data types](https://agentprime.io/advisories/CVE-2025-55157.md)
  `CVE-2025-55157` · CVE record: vim vim · CVSS 6.9 Medium · Not analysed yet · Published 11 Aug 2025 · Tags: Memory corruption
- [Vim double-free vulnerability during Vim9 script import operations](https://agentprime.io/advisories/CVE-2025-55158.md)
  `CVE-2025-55158` · CVE record: vim vim · CVSS 6.9 Medium · Not analysed yet · Published 11 Aug 2025 · Tags: Memory corruption
- [Vim has path traversal issue with zip.vim and special crafted zip archives](https://agentprime.io/advisories/CVE-2025-53906.md)
  `CVE-2025-53906` · CVE record: vim vim · CVSS 4.1 Medium · Not analysed yet · Published 15 Jul 2025 · Tags: Path traversal
- [Vim has path traversial issue with tar.vim and special crafted tar files](https://agentprime.io/advisories/CVE-2025-53905.md)
  `CVE-2025-53905` · CVE record: vim vim · CVSS 4.1 Medium · Not analysed yet · Published 15 Jul 2025 · Tags: Path traversal
- [Vim vulnerable to potential data loss with zip.vim and special crafted zip files](https://agentprime.io/advisories/CVE-2025-29768.md)
  `CVE-2025-29768` · CVE record: vim vim · CVSS 4.4 Medium · Not analysed yet · Published 13 Mar 2025 · Tags: Command injection
- [Improper Input Validation in Vim](https://agentprime.io/advisories/CVE-2025-27423.md)
  `CVE-2025-27423` · CVE record: vim vim · CVSS 7.1 High · Critical (CVSS 7+ and EPSS) · EPSS 0.22 · Not analysed yet · Published 3 Mar 2025 · Tags: Command injection
- [heap-use-after-free in function str_to_reg in vim/vim](https://agentprime.io/advisories/CVE-2025-26603.md)
  `CVE-2025-26603` · CVE record: vim vim · CVSS 4.2 Medium · Not analysed yet · Published 18 Feb 2025 · Tags: Memory corruption
- [vim main.c memory corruption](https://agentprime.io/advisories/CVE-2025-1215.md)
  `CVE-2025-1215` · CVE record: vim · CVSS 2.4 Low · Not analysed yet · Published 12 Feb 2025 · Tags: Memory corruption
- [segmentation fault in win_line() in Vim < 9.1.1043](https://agentprime.io/advisories/CVE-2025-24014.md)
  `CVE-2025-24014` · CVE record: vim vim · CVSS 4.2 Medium · Not analysed yet · Published 20 Jan 2025 · Tags: Memory corruption
- [heap-buffer-overflow with visual mode in Vim < 9.1.1003](https://agentprime.io/advisories/CVE-2025-22134.md)
  `CVE-2025-22134` · CVE record: vim vim · CVSS 4.2 Medium · Not analysed yet · Published 13 Jan 2025 · Tags: Memory corruption
- [use-after-free when closing buffers in Vim](https://agentprime.io/advisories/CVE-2024-47814.md)
  `CVE-2024-47814` · CVE record: vim vim · CVSS 3.9 Low · Not analysed yet · Published 7 Oct 2024 · Tags: Memory corruption

Older: <https://agentprime.io/advisories/technology/vim.md?cursor=WyIyMDI0LTEwLTA3VDIxOjE2OjAxLjc5NjAwMFoiLCJDVkUtMjAyNC00NzgxNCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=vim>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/vim/>. Everything for agents: <https://agentprime.io/llms.txt>.