CVE Intelligence

Vim vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Vim products: 87 record(s), with severity, exploitation and fixes.

Vim 87

Exploited only (KEV) →

CVE-2022-2849 High · 7.8 CWE-122 Aug 17, 2022
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0220.
CVE-2022-2845 High · 7.8 CWE-1284 Aug 17, 2022
Improper Validation of Specified Quantity in Input in vim/vim
Improper Validation of Specified Quantity in Input in GitHub repository vim/vim prior to 9.0.0218.
CVE-2022-2522 High · 7.8 CWE-122 Jul 25, 2022
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0061.
CVE-2022-2345 High · 7.8 CWE-416 Jul 8, 2022
Use After Free in vim/vim
Use After Free in GitHub repository vim/vim prior to 9.0.0046.
CVE-2022-2344 High · 7.8 CWE-122 Jul 8, 2022
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0045.
CVE-2022-2343 High · 7.8 CWE-122 Jul 8, 2022
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0044.
CVE-2022-2304 High · 7.8 CWE-121 Jul 5, 2022
Stack-based Buffer Overflow in vim/vim
Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.
CVE-2022-2287 High · 7.1 CWE-125 Jul 2, 2022
Out-of-bounds Read in vim/vim
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.
CVE-2022-2286 High · 7.8 CWE-125 Jul 2, 2022
Out-of-bounds Read in vim/vim
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.
CVE-2022-2285 High · 7.8 CWE-190 Jul 2, 2022
Integer Overflow or Wraparound in vim/vim
Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.
CVE-2022-2284 High · 7.8 CWE-122 Jul 2, 2022
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.
CVE-2022-2257 High · 7.8 CWE-125 Jun 30, 2022
Out-of-bounds Read in vim/vim
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.
CVE-2022-2210 High · 7.8 CWE-787 Jun 27, 2022
Out-of-bounds Write in vim/vim
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
CVE-2022-2208 Medium · 5.5 CWE-476 Jun 27, 2022
NULL Pointer Dereference in vim/vim
NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.5163.
CVE-2022-2207 High · 7.8 CWE-122 Jun 27, 2022
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2022-2206 High · 7.8 CWE-125 Jun 26, 2022
Out-of-bounds Read in vim/vim
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
CVE-2022-2183 High · 7.8 CWE-125 Jun 23, 2022
Out-of-bounds Read in vim/vim
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
CVE-2022-2182 High · 7.8 CWE-122 Jun 23, 2022
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2022-2175 High · 7.8 CWE-125 Jun 23, 2022
Buffer Over-read in vim/vim
Buffer Over-read in GitHub repository vim/vim prior to 8.2.
CVE-2022-2129 High · 7.8 CWE-787 Jun 19, 2022
Out-of-bounds Write in vim/vim
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
CVE-2022-2126 High · 7.8 CWE-125 Jun 19, 2022
Out-of-bounds Read in vim/vim
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
CVE-2022-2125 High · 7.8 CWE-122 Jun 19, 2022
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2022-2124 High · 7.8 CWE-126 Jun 19, 2022
Buffer Over-read in vim/vim
Buffer Over-read in GitHub repository vim/vim prior to 8.2.
CVE-2022-2042 High · 7.8 CWE-416 Jun 10, 2022
Use After Free in vim/vim
Use After Free in GitHub repository vim/vim prior to 8.2.
CVE-2022-1674 Medium · 5.5 CWE-476 May 12, 2022
NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in vim/vim
NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 allows attackers to cause a denial of service (application crash) via a crafted input.