Advisories · Technology
vim.
Every CVE that names vim among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.8 High
Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution
- vim
- Red Hat Hardened Images
- Code injection
- CVSS 7.1 High
Vim: Arbitrary Ex Command Execution in C Omni-Completion
- vim
- Code injection
- CWE-829
- CVSS 8.6 High
Vim: Arbitrary Code Execution via Netrw Menu Construction
- vim
- Command injection
- CWE-184
- CVSS 8.4 High
Vim: Arbitrary Code Execution via Shell Keyword Lookup
- vim
- Command injection
- CVSS 8.4 High
Vim: Arbitrary Command Execution via Malicious `.VimballRecord` Entry Replay in `vimball.vim`
- vim
- Code injection
- CWE-829
- CVSS 4.6 Medium
Vim: Out-of-bounds Access in Popup Opacity Handling
- vim
- Memory corruption
- CVSS 7.1 High
Vim: Heap Buffer Overflow in Text Property Handling
- vim
- Memory corruption
- CVSS 8.5 High
Vim: Heap Buffer Overflow when Loading a Spell File
- vim
- Memory corruption
- CVSS 3.3 Low
Vim: Use-after-free in JSON Decoding
- vim
- Memory corruption
- CVSS 6.8 Medium
Vim: Stack Buffer Overflow in the Vim Socket Server
- vim
- Memory corruption
- CVSS 8.4 High
Vim: Arbitrary Code Execution via PHP Omni-Completion
- vim
- Code injection
- CVSS 8.4 High
Vim: Arbitrary Code Execution via C Omni-Completion
- vim
- Code injection
- CVSS 5.6 Medium
Vim: Out-of-bounds Write in SAL Soundfolding
- vim
- Memory corruption
- CVSS 5.7 Medium
Vim: Out-of-bounds Write in Spell File Word Count
- vim
- Memory corruption
- CVSS 5.5 Medium
Vim: Out-of-bounds Write in Spell File Prefix Dump
- vim
- Memory corruption
- CVSS 5.7 Medium
Vim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filename
- vim
- Command injection
- Code injection
- CVSS 5.3 Medium
Vim: Out-of-bounds Read in Text Property Count
- vim
- Memory corruption
- CVSS 5.5 Medium
Vim: Out-of-bounds Read with libsodium-encrypted Files
- vim
- Memory corruption
- CVSS 6.5 Medium
Vim: PowerShell Command Injection via Unescaped Filename in zip.vim Extraction
- vim
- Command injection
- CVSS 6.8 Medium
Vim: Out-of-bounds Read with Text Properties
- vim
- Memory corruption
- CVSS 4.0 Medium
Vim: Stack out-of-bounds write in `spell_soundfold_sofo()` via an over-length `soundfold()` argument
- vim
- Memory corruption
- CVSS 8.4 High
Vim: Arbitrary Code Execution via Python Omni-Completion Docstrings
- vim
- Code injection
- CVSS 7.5 High
Vim: Arbitrary Code Execution via Python Omni-Completion
- vim
- Code injection
- CVSS 6.9 Medium
Vim: Out-of-bounds Read in Terminal Screen Snapshot
- vim
- Memory corruption
- CVSS 7.3 High
Vim: Arbitrary Code Execution via Python Omni-Completion
- vim
- Code injection
- CWE-829
- CVSS 7.3 High
Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name
- vim
- Other injection
- Code injection
- CVSS 5.1 Medium
Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex
- vim
- Code injection
- CVSS 3.6 Low
Vim: Command injection in tar#Vimuntar via missing shellescape {special} flag
- vim
- Command injection
- CVSS 6.6 Medium
Vim: Heap Buffer Overflow in spell file loading
- vim
- Memory corruption
- CVSS 4.6 Medium
Vim: OS Command Injection via 'path' completion
- vim
- Command injection
- CVSS 4.4 Medium
Vim: OS Command Injection in netrw
- vim
- Command injection
- CVSS 6.6 Medium
Vim: Command injection via backtick expansion in tag filenames
- vim
- Command injection
- CVSS 5.0 Medium
Vim Ex command injection in Vims NetBeans integration
- vim
- Code injection
- CVSS 4.1 Medium
Path traversal issue with zip.vim in Vim
- vim
- Path traversal
- CVSS 8.2 High
Vim modeline bypass via various options affects Vim < 9.2.0276
- vim
- Command injection
- CVSS 9.2 CriticalCritical · CVSS 9+
OS command injection in Vim
- Vim
- Command injection
- Code injection
- CVSS 5.6 Medium
Vim affected by Command injection via newline in glob()
- vim
- Command injection
- CVSS 5.3 Medium
NFA regex engine NULL pointer dereference affects Vim < 9.2.0137
- vim
- Memory corruption
- CVSS 2.2 Low
Vim has stack-buffer-overflow in build_stl_str_hl()
- vim
- Memory corruption
- CVSS 5.3 Medium
Vim has a heap-buffer-overflow and a segmentation fault
- vim
- Memory corruption
- CWE-20
- CVSS 4.4 Medium
Vim has Heap-based Buffer Overflow and OOB Read in :terminal
- vim
- Memory corruption
- CVSS 5.3 Medium
Vim has Heap-based Buffer Underflow in Emacs tags parsing
- vim
- Memory corruption
- CVSS 4.4 Medium
Vim has Heap-based Buffer Overflow in Emacs tags parsing
- vim
- Memory corruption
- CVSS 4.4 Medium
Vim has OS Command Injection in netrw
- vim
- CWE-86
- CVSS 5.4 Medium
Vim has a Netbeans specialKeys Stack Buffer Overflow
- vim
- Memory corruption
- CVSS 6.6 Medium
Heap Overflow in Vim
- vim
- Memory corruption
- CVSS 7.8 High
Vim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerability
- vim
- CWE-427
- CVSS 4.8 Medium
vim xxd xxd.c main buffer overflow
- vim
- Memory corruption
- CVSS 4.8 Medium
vim memmove-vec-unaligned-erms.S __memmove_avx_unaligned_erms memory corruption
- vim
- Memory corruption
- CVSS 6.9 Medium
Vim heap use-after-free vulnerability when processing recursive tuple data types
- vim
- Memory corruption
- CVSS 6.9 Medium
Vim double-free vulnerability during Vim9 script import operations
- vim
- Memory corruption
- CVSS 4.1 Medium
Vim has path traversal issue with zip.vim and special crafted zip archives
- vim
- Path traversal
- CVSS 4.1 Medium
Vim has path traversial issue with tar.vim and special crafted tar files
- vim
- Path traversal
- CVSS 4.4 Medium
Vim vulnerable to potential data loss with zip.vim and special crafted zip files
- vim
- Command injection
- CVSS 7.1 HighCritical · CVSS 7+ and EPSS
Improper Input Validation in Vim
- vim
- Command injection
- CVSS 4.2 Medium
heap-use-after-free in function str_to_reg in vim/vim
- vim
- Memory corruption
- CVSS 2.4 Low
vim main.c memory corruption
- vim
- Memory corruption
- CVSS 4.2 Medium
segmentation fault in win_line() in Vim < 9.1.1043
- vim
- Memory corruption
- CVSS 4.2 Medium
heap-buffer-overflow with visual mode in Vim < 9.1.1003
- vim
- Memory corruption
- CVSS 3.9 Low
use-after-free when closing buffers in Vim
- vim
- Memory corruption