Vulnerabilities in Vim

231 results
Vexday analysis

O Vim apresenta um perfil de risco baixo com apenas 1 vulnerabilidade crítica registrada (CWE-78 - execução de comando), sem evidência de exploração ativa em campo (KEV=0). A vulnerabilidade não foi publicada recentemente, reduzindo a urgência de resposta imediata, embora o tipo de fraqueza (command injection) mantenha relevância em cenários de risco elevado.

CVE-2022-2874MEDIUMNULL Pointer Dereference in vim/vimEPSS 0.5%CVE-2022-2849HIGHHeap-based Buffer Overflow in vim/vimEPSS 0.5%CVE-2022-4293MEDIUMFloating Point Comparison with Incorrect Operator in vim/vimEPSS 0.5%CVE-2023-2609HIGHNULL Pointer Dereference in vim/vimEPSS 0.5%CVE-2023-0049HIGHOut-of-bounds Read in vim/vimEPSS 0.5%CVE-2026-34982HIGHVim modeline bypass via various options affects Vim < 9.2.0276EPSS 0.5%CVE-2023-0054HIGHOut-of-bounds Write in vim/vimEPSS 0.5%CVE-2023-0288HIGHHeap-based Buffer Overflow in vim/vimEPSS 0.5%CVE-2023-2610HIGHInteger Overflow or Wraparound in vim/vimEPSS 0.5%CVE-2023-1127HIGHDivide By Zero in vim/vimEPSS 0.5%CVE-2025-66476HIGHVim for Windows Uncontrolled Search Path Element Remote Code Execution VulnerabilityEPSS 0.5%CVE-2023-1355HIGHNULL Pointer Dereference in vim/vimEPSS 0.5%CVE-2023-1175HIGHIncorrect Calculation of Buffer Size in vim/vimEPSS 0.4%CVE-2022-4141HIGHHeap-based Buffer Overflow in vim/vimEPSS 0.4%CVE-2023-5441MEDIUMNULL Pointer Dereference in vim/vimEPSS 0.4%CVE-2023-1264MEDIUMNULL Pointer Dereference in vim/vimEPSS 0.4%CVE-2023-2426MEDIUMUse of Out-of-range Pointer Offset in vim/vimEPSS 0.4%CVE-2022-3591HIGHUse After Free in vim/vimEPSS 0.4%CVE-2025-29768MEDIUMVim vulnerable to potential data loss with zip.vim and special crafted zip filesEPSS 0.4%CVE-2022-1769MEDIUMBuffer Over-read in vim/vimEPSS 0.4%