Vulnerabilities in Vim

231 results
Vexday analysis

O Vim apresenta um perfil de risco baixo com apenas 1 vulnerabilidade crítica registrada (CWE-78 - execução de comando), sem evidência de exploração ativa em campo (KEV=0). A vulnerabilidade não foi publicada recentemente, reduzindo a urgência de resposta imediata, embora o tipo de fraqueza (command injection) mantenha relevância em cenários de risco elevado.

CVE-2022-2264HIGHHeap-based Buffer Overflow in vim/vimEPSS 1.3%CVE-2021-4069HIGHUse After Free in vim/vimEPSS 1.3%CVE-2022-2231HIGHNULL Pointer Dereference in vim/vimEPSS 1.3%CVE-2022-2344HIGHHeap-based Buffer Overflow in vim/vimEPSS 1.3%CVE-2022-0213MEDIUMHeap-based Buffer Overflow in vim/vimEPSS 1.2%CVE-2022-2345HIGHUse After Free in vim/vimEPSS 1.2%CVE-2022-1771MEDIUMUncontrolled Recursion in vim/vimEPSS 1.2%CVE-2023-5344MEDIUMHeap-based Buffer Overflow in vim/vimEPSS 1.2%CVE-2026-28417MEDIUMVim has OS Command Injection in netrwEPSS 1.2%CVE-2022-0407MEDIUMHeap-based Buffer Overflow in vim/vimEPSS 1.2%CVE-2022-1796MEDIUMUse After Free in vim/vimEPSS 1.1%CVE-2022-2598MEDIUMOut-of-bounds Write to API in vim/vimEPSS 1.1%CVE-2022-3278MEDIUMNULL Pointer Dereference in vim/vimEPSS 1.0%CVE-2022-3520HIGHHeap-based Buffer Overflow in vim/vimEPSS 1.0%CVE-2022-2982HIGHUse After Free in vim/vimEPSS 1.0%CVE-2026-44656MEDIUMVim: OS Command Injection via 'path' completionEPSS 0.9%CVE-2022-2862HIGHUse After Free in vim/vimEPSS 0.9%CVE-2022-2980MEDIUMNULL Pointer Dereference in vim/vimEPSS 0.9%CVE-2026-33412MEDIUMVim affected by Command injection via newline in glob()EPSS 0.8%CVE-2026-42307MEDIUMVim: OS Command Injection in netrwEPSS 0.8%