CVE Intelligence

Vim vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Vim products: 87 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2022-1620 High · 7.5 CWE-476 May 8, 2022
NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in vim/vim
NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in GitHub repository vim/vim prior to 8.2.4901. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 allows attackers to cause a denial of service (application crash) via a crafted input.
CVE-2022-1619 High · 7.8 CWE-122 May 8, 2022
Heap-based Buffer Overflow in function cmdline_erase_chars in vim/vim
Heap-based Buffer Overflow in function cmdline_erase_chars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing software, modify memory, and possible remote execution
CVE-2022-1616 High · 7.8 CWE-416 May 7, 2022
Use after free in append_command in vim/vim
Use after free in append_command in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution
CVE-2022-0351 High · 7.8 CWE-119 Jan 25, 2022
Access of Memory Location Before Start of Buffer in vim/vim
Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2.
CVE-2022-0213 Medium · 6.6 CWE-122 Jan 14, 2022
Heap-based Buffer Overflow in vim/vim
vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-4166 High · 7.1 CWE-125 Dec 25, 2021
Out-of-bounds Read in vim/vim
vim is vulnerable to Out-of-bounds Read
CVE-2021-4136 High · 7.8 CWE-122 Dec 19, 2021
Heap-based Buffer Overflow in vim/vim
vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-3973 High · 7.8 CWE-122 Nov 19, 2021
Heap-based Buffer Overflow in vim/vim
vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-3968 High · 8.0 CWE-122 Nov 19, 2021
Heap-based Buffer Overflow in vim/vim
vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-3974 High · 7.8 CWE-416 Nov 19, 2021
Use After Free in vim/vim
vim is vulnerable to Use After Free
CVE-2021-3928 High · 7.8 CWE-457 Nov 5, 2021
Use of Uninitialized Variable in vim/vim
vim is vulnerable to Use of Uninitialized Variable
CVE-2021-3927 High · 7.8 CWE-122 Nov 5, 2021
Heap-based Buffer Overflow in vim/vim
vim is vulnerable to Heap-based Buffer Overflow