Filtered by vendor Vim Subscriptions
Filtered by product Vim Subscriptions
Total 255 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-73074 1 Vim 1 Vim 2026-10-06 6.7 Medium
Vim is an open source, command line text editor. Prior to 9.2.0841, prop_add_one() in src/textprop.c uses the proplen value from get_text_props() to increment a uint16_t property count beyond 0xffff, wrapping the count to zero and copying existing text-property records into a heap allocation sized for none of them. This issue is fixed in version 9.2.0841.
CVE-2026-73075 1 Vim 1 Vim 2026-10-06 3.9 Low
Vim is an open source, command line text editor. From 9.2.0469 until 9.2.0843, popup_mark_opacity_zindex() in src/popupwin.c can use a negative w_winrow for a text-property-anchored popup with clipwindow and opacity, indexing before the screen array instead of accounting for w_popup_topoff and causing an out-of-bounds read and conditional write. This issue is fixed in version 9.2.0843.
CVE-2026-73076 1 Vim 1 Vim 2026-10-06 7.8 High
Vim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named .VimballRecord to overwrite the installation record with attacker-chosen commands. When vimball#RmVimball() later processes the matching record entry, the stored Ex commands, including operating-system commands invoked through :!, execute with the privileges of the user running Vim. This issue is fixed in version 9.2.0847.
CVE-2026-73077 1 Vim 1 Vim 2026-10-06 7.8 High
Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual-mode selections from K through keywordprg commands without safely separating shell arguments. fnameescape() and PATH_ESC_CHARS do not neutralize shell metacharacters before ShKeywordPrg, ZshKeywordPrg, or GetHelp invokes bash, zsh, or PowerShell, allowing arbitrary operating-system commands to execute with the privileges of the user running Vim. This issue is fixed in version 9.2.0839.
CVE-2026-73078 1 Vim 1 Vim 2026-10-06 8.8 High
Vim is an open source, command line text editor. Prior to 9.2.0840, runtime/plugin/netrwPlugin.vim loads netrw and runtime/pack/dist/opt/netrw/autoload/netrw.vim constructs Bookmarks, History, and Targets menu entries by interpolating attacker-controlled directory paths into executed :menu commands. s:NetrwBookmarkMenu(), s:NetrwTgtMenu(), g:netrw_menu_escape, EX_TRLBAR, and netrw#MakeTgt() fail to neutralize the | command separator or single quotes at five construction sites, allowing a crafted path browsed or bookmarked in GUI Vim to execute arbitrary Ex and operating-system commands. This issue is fixed in version 9.2.0840.
CVE-2023-0433 4 Apple, Fedoraproject, Neovim and 1 more 4 Macos, Fedora, Neovim and 1 more 2026-09-24 7.8 High
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225.
CVE-2022-3256 4 Debian, Fedoraproject, Neovim and 1 more 4 Debian Linux, Fedora, Neovim and 1 more 2026-09-24 7.8 High
Use After Free in GitHub repository vim/vim prior to 9.0.0530.
CVE-2023-0288 4 Apple, Fedoraproject, Neovim and 1 more 4 Macos, Fedora, Neovim and 1 more 2026-09-24 7.8 High
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
CVE-2022-3296 3 Fedoraproject, Neovim, Vim 3 Fedora, Neovim, Vim 2026-09-24 7.8 High
Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0577.
CVE-2023-2426 4 Apple, Fedoraproject, Neovim and 1 more 4 Macos, Fedora, Neovim and 1 more 2026-09-24 5.3 Medium
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.
CVE-2023-0049 5 Apple, Fedoraproject, Neovim and 2 more 5 Macos, Fedora, Neovim and 2 more 2026-09-24 7.8 High
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
CVE-2022-4141 4 Debian, Fedoraproject, Neovim and 1 more 4 Debian Linux, Fedora, Neovim and 1 more 2026-09-24 7.8 High
Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command.
CVE-2022-3591 2 Neovim, Vim 2 Neovim, Vim 2026-09-24 7.8 High
Use After Free in GitHub repository vim/vim prior to 9.0.0789.
CVE-2022-3297 3 Fedoraproject, Neovim, Vim 3 Fedora, Neovim, Vim 2026-09-24 7.8 High
Use After Free in GitHub repository vim/vim prior to 9.0.0579.
CVE-2022-3324 4 Debian, Fedoraproject, Neovim and 1 more 4 Debian Linux, Fedora, Neovim and 1 more 2026-09-24 7.8 High
Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598.
CVE-2023-4738 4 Apple, Debian, Neovim and 1 more 4 Macos, Debian Linux, Neovim and 1 more 2026-09-18 7.8 High
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848.
CVE-2023-4734 3 Apple, Neovim, Vim 3 Macos, Neovim, Vim 2026-09-18 7.8 High
Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846.
CVE-2023-4733 4 Apple, Fedoraproject, Neovim and 1 more 4 Macos, Fedora, Neovim and 1 more 2026-09-18 7.8 High
Use After Free in GitHub repository vim/vim prior to 9.0.1840.
CVE-2023-1175 4 Debian, Fedoraproject, Neovim and 1 more 4 Debian Linux, Fedora, Neovim and 1 more 2026-09-18 6.6 Medium
Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378.
CVE-2023-1170 3 Fedoraproject, Neovim, Vim 3 Fedora, Neovim, Vim 2026-09-18 6.6 Medium
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376.