Vulnerabilities in Vim
231 resultsCVE-2026-42307MEDIUMVim: OS Command Injection in netrwEPSS 0.8%CVE-2023-48233LOWoverflow with count for :s command in vimEPSS 0.8%CVE-2023-48234LOWoverflow in nv_z_get_count in vimEPSS 0.8%CVE-2023-48235LOWoverflow in ex address parsing in vimEPSS 0.8%CVE-2023-48237LOWoverflow in shift_line in vimEPSS 0.8%CVE-2021-3770HIGHHeap-based Buffer Overflow in vim/vimEPSS 0.7%CVE-2022-0943HIGHHeap-based Buffer Overflow occurs in vim in vim/vimEPSS 0.7%CVE-2023-48236LOWoverflow in get_number in vimEPSS 0.7%CVE-2023-48232LOWFloating point Exception in adjust_plines_for_skipcol() in vimEPSS 0.7%CVE-2022-4292HIGHUse After Free in vim/vimEPSS 0.7%CVE-2023-48231LOWUse-After-Free in win_close() in vimEPSS 0.7%CVE-2021-3903HIGHHeap-based Buffer Overflow in vim/vimEPSS 0.6%CVE-2026-39881MEDIUMVim Ex command injection in Vims NetBeans integrationEPSS 0.6%CVE-2021-3928HIGHUse of Uninitialized Variable in vim/vimEPSS 0.6%CVE-2022-0351HIGHAccess of Memory Location Before Start of Buffer in vim/vimEPSS 0.6%CVE-2022-1733MEDIUMHeap-based Buffer Overflow in vim/vimEPSS 0.6%CVE-2026-34714CRITICALVim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr}EPSS 0.6%CVE-2023-4735MEDIUMOut-of-bounds Write in vim/vimEPSS 0.6%CVE-2023-0049HIGHOut-of-bounds Read in vim/vimEPSS 0.6%CVE-2022-2522HIGHHeap-based Buffer Overflow in vim/vimEPSS 0.6%