Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

30 records

Priority LOW 29

Vim is an open source, command line text editor.

CVSS 3.1MEDIUM 6.6 Local Low privileges User interaction EPSS 0.00262 Published 2026-02-06 Partial fix · 9.1.2132 CWE-122
Priority LOW 25

When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does not properly end visual mode and therefore may try to access beyond the e…

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00375 Published 2025-01-13 Partial fix · v9.1.1003 CWE-122
Priority LOW 22

The UNIX editor Vim prior to version 9.1.0678 has a use-after-free error in argument list handling.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00349 Published 2024-08-15 Partial fix · 9.1.0678 CWE-416
TI-2023-05093 CVE-2023-5535 · GHSA-9h8h-jwrx-hxgg

Use After Free in vim/vim

Priority HIGH 69

Use After Free in GitHub repository vim/vim prior to v9.0.2010.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00485 Published 2023-10-11 Partial fix · v9.0.2010 CWE-416
TI-2023-04407 CVE-2023-4781 · GHSA-hvfg-rr99-vxgg

Heap-based Buffer Overflow in vim/vim

Priority HIGH 69

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00577 Published 2023-09-05 Partial fix · 9.0.1873 CWE-122
TI-2023-04361 CVE-2023-4733 · GHSA-2rh9-r44r-2xv6

Use After Free in vim/vim

Priority HIGH 69

Use After Free in GitHub repository vim/vim prior to 9.0.1840.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00509 Published 2023-09-04 Partial fix · 9.0.1840 CWE-416
TI-2023-04378 CVE-2023-4750 · GHSA-ph6h-mvrc-7rq5

Use After Free in vim/vim

Priority HIGH 69

Use After Free in GitHub repository vim/vim prior to 9.0.1857.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00521 Published 2023-09-04 Partial fix · 9.0.1857 CWE-416
TI-2023-04380 CVE-2023-4752 · GHSA-5pgr-2gf9-wh94

Use After Free in vim/vim

Priority LOW 35

Use After Free in GitHub repository vim/vim prior to 9.0.1858.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00565 Published 2023-09-04 Partial fix · 9.0.1858 CWE-416
TI-2023-04379 CVE-2023-4751 · GHSA-mfhq-77wv-g7gh

Heap-based Buffer Overflow in vim/vim

Priority HIGH 69

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00564 Published 2023-09-03 Partial fix · 9.0.1331 CWE-122
TI-2023-04366 CVE-2023-4738 · GHSA-x7vr-7frv-2rrh

Heap-based Buffer Overflow in vim/vim

Priority HIGH 69

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00566 Published 2023-09-02 Partial fix · 9.0.1848 CWE-122
TI-2023-04362 CVE-2023-4734 · GHSA-424w-j4hf-8cgp

Integer Overflow or Wraparound in vim/vim

Priority HIGH 69

Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00545 Published 2023-09-02 Partial fix · 9.0.1846 CWE-190
Priority MEDIUM 57

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.

CVSS 3.1MEDIUM 5.3 Local Low privileges No interaction EPSS 0.00408 Published 2023-04-29 Fixed in 9.0.1499 CWE-823
Priority MEDIUM 62

Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378.

CVSS 3.1MEDIUM 6.6 Local No auth User interaction EPSS 0.00448 Published 2023-03-04 Partial fix · 9.0.1378 CWE-131
TI-2023-01108 CVE-2023-1170 · GHSA-4f5c-477m-3p63

Heap-based Buffer Overflow in vim/vim

Priority MEDIUM 62

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376.

CVSS 3.1MEDIUM 6.6 Local No auth User interaction EPSS 0.00495 Published 2023-03-03 Partial fix · 9.0.1376 CWE-122
TI-2023-00410 CVE-2023-0433 · GHSA-hv9j-pr23-x4hf

Heap-based Buffer Overflow in vim/vim

Priority HIGH 69

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00531 Published 2023-01-21 Partial fix · 9.0.1225 CWE-122
TI-2023-00273 CVE-2023-0288 · GHSA-vr7q-737x-h8wj

Heap-based Buffer Overflow in vim/vim

Priority HIGH 69

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00495 Published 2023-01-13 Partial fix · 9.0.1189 CWE-122
TI-2023-00045 CVE-2023-0049 · GHSA-3j5g-pgw8-92vr

Out-of-bounds Read in vim/vim

Priority HIGH 67

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00583 Published 2023-01-04 Partial fix · 9.0.1143 CWE-125
TI-2022-03305 CVE-2022-3591 · GHSA-c83f-4r5r-pqcw

Use After Free in vim/vim

Priority HIGH 69

Use After Free in GitHub repository vim/vim prior to 9.0.0789.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00396 Published 2022-12-02 Partial fix · 9.0.0789 CWE-416
TI-2022-03787 CVE-2022-4141 · GHSA-w2q9-j8v8-2gf2

Heap-based Buffer Overflow in vim/vim

Priority HIGH 67

Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0046 Published 2022-11-25 Partial fix · 9.0.0947 CWE-122
TI-2022-03072 CVE-2022-3324 · GHSA-9pw5-p7rh-xp62

Stack-based Buffer Overflow in vim/vim

Priority HIGH 69

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00532 Published 2022-09-27 Partial fix · 9.0.0598 CWE-121
TI-2022-03046 CVE-2022-3297 · GHSA-fc4g-xr73-63rv

Use After Free in vim/vim

Priority HIGH 69

Use After Free in GitHub repository vim/vim prior to 9.0.0579.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0052 Published 2022-09-25 Partial fix · 9.0.0579 CWE-416
TI-2022-03045 CVE-2022-3296 · GHSA-7cqh-jx43-54c9

Stack-based Buffer Overflow in vim/vim

Priority HIGH 69

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0577.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00561 Published 2022-09-25 Partial fix · 9.0.0577 CWE-121
Load more