Skip to content
Vim vulnerabilities
Newest
-
vim
Vim: Arbitrary Ex Command Execution in C Omni-Completion
CVE-2026-73073
Fix available
7.1 High
-
vim
Vim: Arbitrary Code Execution via Netrw Menu Construction
CVE-2026-73078
Fix available
8.6 High
-
vim
Vim: Arbitrary Code Execution via Shell Keyword Lookup
CVE-2026-73077
Fix available
8.4 High
-
vim
Vim: Arbitrary Command Execution via Malicious `.VimballRecord` Entry Replay in `vimball.vim`
CVE-2026-73076
Fix available
8.4 High
-
vim
Vim: Out-of-bounds Access in Popup Opacity Handling
CVE-2026-73075
Fix available
4.6 Medium
-
vim
Vim: Heap Buffer Overflow in Text Property Handling
CVE-2026-73074
Fix available
7.1 High
-
vim
Vim: Heap Buffer Overflow when Loading a Spell File
CVE-2026-73072
Public exploitFix available
8.5 High
-
vim
Vim: Use-after-free in JSON Decoding
CVE-2026-73071
Fix available
3.3 Low
-
vim
Vim: Stack Buffer Overflow in the Vim Socket Server
CVE-2026-73070
Fix available
6.8 Medium
-
vim
An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code...
CVE-2026-51401
7.7 High
-
vim
An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code...
CVE-2026-51400
8.4 High
-
vim
Vim: Arbitrary Code Execution via C Omni-Completion
CVE-2026-59858
Fix available
8.4 High
-
vim
Vim: Out-of-bounds Write in SAL Soundfolding
CVE-2026-59857
Fix available
5.6 Medium
-
vim
Vim: Arbitrary Code Execution via PHP Omni-Completion
CVE-2026-59856
Fix available
8.4 High
-
vim
Vim: Out-of-bounds Write in Spell File Word Count
CVE-2026-55693
Fix available
5.7 Medium
-
vim
Vim: Out-of-bounds Read in Text Property Count
CVE-2026-57451
Fix available
5.3 Medium
-
vim
Vim: Out-of-bounds Read with libsodium-encrypted Files
CVE-2026-57452
Fix available
5.5 Medium
-
vim
Vim: PowerShell Command Injection via Unescaped Filename in zip.vim Extraction
CVE-2026-57453
Fix available
6.5 Medium
-
vim
Vim: Out-of-bounds Read with Text Properties
CVE-2026-57454
Fix available
6.8 Medium
-
vim
Vim: Stack out-of-bounds write in `spell_soundfold_sofo()` via an over-length `soundfold()` argument
CVE-2026-57455
Fix available
4.0 Medium
-
vim
Vim: Arbitrary Code Execution via Python Omni-Completion Docstrings
CVE-2026-57456
Fix available
8.4 High
-
vim
Vim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filename
CVE-2026-55895
Fix available
5.7 Medium
-
vim
Vim: Out-of-bounds Write in Spell File Prefix Dump
CVE-2026-55892
Fix available
5.5 Medium
-
vim, red hat enterprise linux 10, enterprise linux 6 +4 more +6 more
Vim: Arbitrary Code Execution via Python Omni-Completion
CVE-2026-52860
Fix available
7.5 High
-
vim
Vim: Out-of-bounds Read in Terminal Screen Snapshot
CVE-2026-52859
Fix available
6.9 Medium
-
vim
Vim: Arbitrary Code Execution via Python Omni-Completion
CVE-2026-52858
Fix available
7.3 High
-
vim, red hat enterprise linux 10, enterprise linux 10.0 extended update support +9 more +11 more
Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name
CVE-2026-47162
Fix available
7.3 High
-
vim
Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex
CVE-2026-47167
Fix available
5.1 Medium
-
vim, red hat enterprise linux 10, enterprise linux 6 +6 more +8 more
Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution
CVE-2026-43961
Fix available
7.8 High
-
vim
Vim: Command injection in tar#Vimuntar via missing shellescape {special} flag
CVE-2026-46483
Fix available
3.6 Low
-
vim, neovim +1 more
Vim: Heap Buffer Overflow in spell file loading
CVE-2026-45130
Fix available
6.6 Medium
-
vim
Vim: OS Command Injection via 'path' completion
CVE-2026-44656
Public exploitFix available
4.6 Medium
-
vim
Vim: OS Command Injection in netrw
CVE-2026-42307
Fix available
4.4 Medium
-
vim
Vim: Command injection via backtick expansion in tag filenames
CVE-2026-41411
Fix available
6.6 Medium
-
vim
Vim Ex command injection in Vims NetBeans integration
CVE-2026-39881
Fix available
5.0 Medium
-
vim
Path traversal issue with zip.vim in Vim
CVE-2026-35177
Fix available
4.1 Medium
-
vim, red hat ai inference server 3.2, ai inference server 3.3 +26 more +28 more
Vim modeline bypass via various options affects Vim < 9.2.0276
CVE-2026-34982
Fix available
8.2 High
-
vim, red hat enterprise linux 10, enterprise linux 6 +4 more +6 more
Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in...
CVE-2026-34714
Fix available
9.2 Critical
-
vim, red hat ai inference server 3.2, ai inference server 3.3 +28 more +30 more
Vim affected by Command injection via newline in glob()
CVE-2026-33412
Fix available
5.6 Medium
-
vim
NFA regex engine NULL pointer dereference affects Vim < 9.2.0137
CVE-2026-32249
Fix available
5.3 Medium
-
vim
Vim has stack-buffer-overflow in build_stl_str_hl()
CVE-2026-28422
Fix available
2.2 Low
-
vim
Vim has a heap-buffer-overflow and a segmentation fault
CVE-2026-28421
Fix available
5.3 Medium
-
vim
Vim has Heap-based Buffer Overflow and OOB Read in :terminal
CVE-2026-28420
Fix available
4.4 Medium
-
vim
Vim has Heap-based Buffer Underflow in Emacs tags parsing
CVE-2026-28419
Fix available
5.3 Medium
-
vim
Vim has Heap-based Buffer Overflow in Emacs tags parsing
CVE-2026-28418
Fix available
4.4 Medium
-
vim
Vim has OS Command Injection in netrw
CVE-2026-28417
Fix available
4.4 Medium
-
vim
Vim has a Netbeans specialKeys Stack Buffer Overflow
CVE-2026-26269
Fix available
5.4 Medium
-
vim, neovim +1 more
Heap Overflow in Vim
CVE-2026-25749
Fix available
6.6 Medium
-
vim
Vim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerability
CVE-2025-66476
7.8 High
-
vim
vim xxd xxd.c main buffer overflow
CVE-2025-9390
Fix available
4.8 Medium
- Show olderLoading…