Vulnerabilities in Vim

231 results
Vexday analysis

O Vim apresenta um perfil de risco baixo com apenas 1 vulnerabilidade crítica registrada (CWE-78 - execução de comando), sem evidência de exploração ativa em campo (KEV=0). A vulnerabilidade não foi publicada recentemente, reduzindo a urgência de resposta imediata, embora o tipo de fraqueza (command injection) mantenha relevância em cenários de risco elevado.

CVE-2026-25749MEDIUMHeap Overflow in VimEPSS 0.2%CVE-2026-28418MEDIUMVim has Heap-based Buffer Overflow in Emacs tags parsingEPSS 0.2%CVE-2026-59856HIGHVim: Arbitrary Code Execution via PHP Omni-CompletionEPSS 0.2%CVE-2026-57453MEDIUMVim: PowerShell Command Injection via Unescaped Filename in zip.vim ExtractionEPSS 0.2%CVE-2026-52858HIGHVim: Arbitrary Code Execution via Python Omni-CompletionEPSS 0.2%CVE-2026-28420MEDIUMVim has Heap-based Buffer Overflow and OOB Read in :terminalEPSS 0.2%CVE-2026-28421MEDIUMVim has a heap-buffer-overflow and a segmentation faultEPSS 0.2%CVE-2026-57454MEDIUMVim: Out-of-bounds Read with Text PropertiesEPSS 0.2%CVE-2026-28419MEDIUMVim has Heap-based Buffer Underflow in Emacs tags parsingEPSS 0.2%CVE-2026-57451MEDIUMVim: Out-of-bounds Read in Text Property CountEPSS 0.2%CVE-2026-43961HIGHVim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code executionEPSS 0.2%CVE-2026-55895MEDIUMVim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filenameEPSS 0.2%CVE-2026-73073HIGHVim: Arbitrary Ex Command Execution in C Omni-CompletionEPSS 0.1%CVE-2026-57456HIGHVim: Arbitrary Code Execution via Python Omni-Completion DocstringsEPSS 0.1%CVE-2026-28422LOWVim has stack-buffer-overflow in build_stl_str_hl()EPSS 0.1%CVE-2026-73077HIGHVim: Arbitrary Code Execution via Shell Keyword LookupEPSS 0.1%CVE-2026-59858HIGHVim: Arbitrary Code Execution via C Omni-CompletionEPSS 0.1%CVE-2026-47167MEDIUMVim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regexEPSS 0.1%CVE-2026-32249MEDIUMNFA regex engine NULL pointer dereference affects Vim < 9.2.0137EPSS 0.1%CVE-2026-73076HIGHVim: Arbitrary Command Execution via Malicious `.VimballRecord` Entry Replay in `vimball.vim`EPSS 0.1%