Vim vulnerabilities
Published CVEs affecting Vim products: 87 record(s), with severity, exploitation and fixes.
CVE-2022-1620
High · 7.5
CWE-476 May 8, 2022
NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in vim/vim
NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in GitHub repository vim/vim prior to 8.2.4901. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 allows attackers to cause a denial of service (application crash) via a crafted input.
CVE-2022-1619
High · 7.8
CWE-122 May 8, 2022
Heap-based Buffer Overflow in function cmdline_erase_chars in vim/vim
Heap-based Buffer Overflow in function cmdline_erase_chars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing software, modify memory, and possible remote execution
CVE-2022-1616
High · 7.8
CWE-416 May 7, 2022
Use after free in append_command in vim/vim
Use after free in append_command in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution
CVE-2022-0351
High · 7.8
CWE-119 Jan 25, 2022
Access of Memory Location Before Start of Buffer in vim/vim
Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2.
CVE-2022-0213
Medium · 6.6
CWE-122 Jan 14, 2022
Heap-based Buffer Overflow in vim/vim
vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-4166
High · 7.1
CWE-125 Dec 25, 2021
Out-of-bounds Read in vim/vim
vim is vulnerable to Out-of-bounds Read
CVE-2021-4136
High · 7.8
CWE-122 Dec 19, 2021
Heap-based Buffer Overflow in vim/vim
vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-3973
High · 7.8
CWE-122 Nov 19, 2021
Heap-based Buffer Overflow in vim/vim
vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-3968
High · 8.0
CWE-122 Nov 19, 2021
Heap-based Buffer Overflow in vim/vim
vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-3974
High · 7.8
CWE-416 Nov 19, 2021
Use After Free in vim/vim
vim is vulnerable to Use After Free
CVE-2021-3928
High · 7.8
CWE-457 Nov 5, 2021
Use of Uninitialized Variable in vim/vim
vim is vulnerable to Use of Uninitialized Variable
CVE-2021-3927
High · 7.8
CWE-122 Nov 5, 2021
Heap-based Buffer Overflow in vim/vim
vim is vulnerable to Heap-based Buffer Overflow