Vulnerabilities in vim
231 resultsCVE-2025-26603MEDIUMheap-use-after-free in function str_to_reg in vim/vimEPSS 0.2%CVE-2026-55895MEDIUMVim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filenameEPSS 0.2%CVE-2026-52860HIGHVim: Arbitrary Code Execution via Python Omni-CompletionEPSS 0.2%CVE-2026-59856HIGHVim: Arbitrary Code Execution via PHP Omni-CompletionEPSS 0.2%CVE-2026-57453MEDIUMVim: PowerShell Command Injection via Unescaped Filename in zip.vim ExtractionEPSS 0.2%CVE-2026-28421MEDIUMVim has a heap-buffer-overflow and a segmentation faultEPSS 0.2%CVE-2026-28420MEDIUMVim has Heap-based Buffer Overflow and OOB Read in :terminalEPSS 0.2%CVE-2026-52858HIGHVim: Arbitrary Code Execution via Python Omni-CompletionEPSS 0.2%CVE-2026-28419MEDIUMVim has Heap-based Buffer Underflow in Emacs tags parsingEPSS 0.2%CVE-2026-73070MEDIUMVim: Stack Buffer Overflow in the Vim Socket ServerEPSS 0.2%CVE-2026-57452MEDIUMVim: Out-of-bounds Read with libsodium-encrypted FilesEPSS 0.2%CVE-2026-57454MEDIUMVim: Out-of-bounds Read with Text PropertiesEPSS 0.2%CVE-2026-28422LOWVim has stack-buffer-overflow in build_stl_str_hl()EPSS 0.2%CVE-2026-57451MEDIUMVim: Out-of-bounds Read in Text Property CountEPSS 0.2%CVE-2026-43961HIGHVim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code executionEPSS 0.2%CVE-2026-73073HIGHVim: Arbitrary Ex Command Execution in C Omni-CompletionEPSS 0.2%CVE-2026-57456HIGHVim: Arbitrary Code Execution via Python Omni-Completion DocstringsEPSS 0.1%CVE-2026-73077HIGHVim: Arbitrary Code Execution via Shell Keyword LookupEPSS 0.1%CVE-2026-32249MEDIUMNFA regex engine NULL pointer dereference affects Vim < 9.2.0137EPSS 0.1%CVE-2026-59858HIGHVim: Arbitrary Code Execution via C Omni-CompletionEPSS 0.1%