Vulnerabilities

TI-2026-32008 CVE-2026-43961

Code injection in vim

LOW 35

A flaw was found in Vim's netrw plugin.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00159 Published 2026-08-19 Partial fix · 9.2.0480, 9.2.967-1.1.hum1 CWE-94

TI-2026-51280 CVE-2026-73073

Vim: Arbitrary Ex Command Execution in C Omni-Completion

LOW 32

Vim is an open source, command line text editor.

CVSS 4.0HIGH 7.1 Local No auth User interaction EPSS 0.00152 Published 2026-08-18 Partial fix · 9.2.0845 CWE-829

TI-2026-51285 CVE-2026-73078

Vim: Arbitrary Code Execution via Netrw Menu Construction

LOW 39

Vim is an open source, command line text editor.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00314 Published 2026-08-11 Partial fix · 9.2.0840 CWE-184

TI-2026-51284 CVE-2026-73077

Vim: Arbitrary Code Execution via Shell Keyword Lookup

LOW 37

Vim is an open source, command line text editor.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00144 Published 2026-08-11 Fixed in 9.2.0839 CWE-78

TI-2026-51283 CVE-2026-73076

Vim: Arbitrary Command Execution via Malicious `.VimballRecord` Entry Replay in `vimball.vim`

LOW 37

Vim is an open source, command line text editor.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00134 Published 2026-08-11 Partial fix · 9.2.0847 CWE-829

TI-2026-51282 CVE-2026-73075

Vim: Out-of-bounds Access in Popup Opacity Handling

LOW 20

Vim is an open source, command line text editor.

CVSS 4.0MEDIUM 4.6 Local No auth User interaction EPSS 0.00094 Published 2026-08-11 Fixed in 9.2.0843 CWE-124

TI-2026-51281 CVE-2026-73074

Vim: Heap Buffer Overflow in Text Property Handling

LOW 32

Vim is an open source, command line text editor.

CVSS 4.0HIGH 7.1 Local No auth User interaction EPSS 0.00098 Published 2026-08-11 Fixed in 9.2.0841 CWE-190

TI-2026-51279 CVE-2026-73072

Vim: Heap Buffer Overflow when Loading a Spell File

LOW 38

Vim is an open source, command line text editor.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00115 Published 2026-08-11 Partial fix · 9.2.0846 CWE-122

TI-2026-51278 CVE-2026-73071

Vim: Use-after-free in JSON Decoding

LOW 15

Vim is an open source, command line text editor.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00109 Published 2026-08-11 Fixed in 9.2.0844 CWE-416

TI-2026-51277 CVE-2026-73070

Vim: Stack Buffer Overflow in the Vim Socket Server

LOW 29

Vim is an open source, command line text editor.

CVSS 4.0MEDIUM 6.8 Local Low privileges No interaction EPSS 0.00186 Published 2026-08-11 Partial fix · 9.2.0842 CWE-121

TI-2026-37496 CVE-2026-51401 · GHSA-wv45-rxv4-pf47

An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute…

LOW 35

An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vms_fixfilename() function within file vim/src/os_vms.c

CVSS 3.1HIGH 7.7 Local No auth No interaction EPSS 0.00202 Published 2026-08-04 No fix listed CWE-94

TI-2026-37495 CVE-2026-51400 · GHSA-c4x9-mpg2-r897

An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute…

LOW 38

An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vms_fixfilename() function within file vim/src/os_vms.c

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00181 Published 2026-08-04 No fix listed CWE-401

TI-2026-42671 CVE-2026-59856

Vim: Arbitrary Code Execution via PHP Omni-Completion

LOW 38

Vim is an open source, command line text editor.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00216 Published 2026-07-09 Partial fix · 9.2.0736 CWE-94

TI-2026-42673 CVE-2026-59858

Vim: Arbitrary Code Execution via C Omni-Completion

LOW 37

Vim is an open source, command line text editor.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00137 Published 2026-07-09 Partial fix · 9.2.0735 CWE-94

TI-2026-42672 CVE-2026-59857

Vim: Out-of-bounds Write in SAL Soundfolding

LOW 24

Vim is an open source, command line text editor.

CVSS 4.0MEDIUM 5.6 Local No auth User interaction EPSS 0.0011 Published 2026-07-09 Partial fix · 9.2.0725 CWE-787

TI-2026-40208 CVE-2026-55693

Vim: Out-of-bounds Write in Spell File Word Count

LOW 26

Vim is an open source, command line text editor.

CVSS 4.0MEDIUM 5.7 Local No auth User interaction EPSS 0.00124 Published 2026-06-25 Partial fix · 9.2.0653 CWE-787

TI-2026-40343 CVE-2026-55892

Vim: Out-of-bounds Write in Spell File Prefix Dump

LOW 24

Vim is an open source, command line text editor.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0012 Published 2026-06-25 Partial fix · 9.2.0662 CWE-787

TI-2026-40346 CVE-2026-55895

Vim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filename

LOW 27

Vim is an open source, command line text editor.

CVSS 4.0MEDIUM 5.7 Local No auth User interaction EPSS 0.00226 Published 2026-06-25 Fixed in 9.2.0663 CWE-78

TI-2026-41383 CVE-2026-57451

Vim: Out-of-bounds Read in Text Property Count

LOW 26

Vim is an open source, command line text editor.

CVSS 3.1MEDIUM 6.1 Local No auth User interaction EPSS 0.00161 Published 2026-06-25 Partial fix · 9.2.0670 CWE-125

TI-2026-41384 CVE-2026-57452

Vim: Out-of-bounds Read with libsodium-encrypted Files

LOW 24

Vim is an open source, command line text editor.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0017 Published 2026-06-25 Partial fix · 9.2.0671 CWE-125

TI-2026-41385 CVE-2026-57453

Vim: PowerShell Command Injection via Unescaped Filename in zip.vim Extraction

LOW 33

Vim is an open source, command line text editor.

CVSS 3.1HIGH 7.3 Local No auth User interaction EPSS 0.00208 Published 2026-06-25 Fixed in 9.2.0678 CWE-77

TI-2026-41386 CVE-2026-57454

Vim: Out-of-bounds Read with Text Properties

LOW 29

Vim is an open source, command line text editor.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00169 Published 2026-06-25 Fixed in 9.2.0679 CWE-125

TI-2026-41387 CVE-2026-57455

Vim: Stack out-of-bounds write in `spell_soundfold_sofo()` via an over-length `soundfold()` argument

LOW 20

Vim is an open source, command line text editor.

CVSS 4.0MEDIUM 4.0 Local No auth User interaction EPSS 0.00118 Published 2026-06-25 Partial fix · 9.2.0698 CWE-787

TI-2026-41388 CVE-2026-57456

Vim: Arbitrary Code Execution via Python Omni-Completion Docstrings

LOW 37

Vim is an open source, command line text editor.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00145 Published 2026-06-25 Fixed in 9.2.0699 CWE-94

TI-2026-37965 CVE-2026-52860

Vim: Arbitrary Code Execution via Python Omni-Completion

LOW 34

Vim is an open source, command line text editor.

CVSS 4.0HIGH 7.5 Network No auth User interaction EPSS 0.00224 Published 2026-06-11 Partial fix · 9.2.0597 CWE-94

Vulnerabilities

Filters