Vulnerabilidades em Vim

231 resultados
Análise Vexday

O Vim apresenta um perfil de risco baixo com apenas 1 vulnerabilidade crítica registrada (CWE-78 - execução de comando), sem evidência de exploração ativa em campo (KEV=0). A vulnerabilidade não foi publicada recentemente, reduzindo a urgência de resposta imediata, embora o tipo de fraqueza (command injection) mantenha relevância em cenários de risco elevado.

CVE-2023-48237LOWoverflow in shift_line in vimEPSS 0.8%CVE-2023-48235LOWoverflow in ex address parsing in vimEPSS 0.8%CVE-2023-48234LOWoverflow in nv_z_get_count in vimEPSS 0.8%CVE-2023-48233LOWoverflow with count for :s command in vimEPSS 0.8%CVE-2025-53906MEDIUMVim has path traversal issue with zip.vim and special crafted zip archivesEPSS 0.7%CVE-2021-3770HIGHHeap-based Buffer Overflow in vim/vimEPSS 0.7%CVE-2022-0943HIGHHeap-based Buffer Overflow occurs in vim in vim/vimEPSS 0.7%CVE-2023-48236LOWoverflow in get_number in vimEPSS 0.7%CVE-2023-48232LOWFloating point Exception in adjust_plines_for_skipcol() in vimEPSS 0.7%CVE-2022-4292HIGHUse After Free in vim/vimEPSS 0.7%CVE-2023-48231LOWUse-After-Free in win_close() in vimEPSS 0.7%CVE-2021-3903HIGHHeap-based Buffer Overflow in vim/vimEPSS 0.6%CVE-2021-3928HIGHUse of Uninitialized Variable in vim/vimEPSS 0.6%CVE-2026-39881MEDIUMVim Ex command injection in Vims NetBeans integrationEPSS 0.6%CVE-2023-4781HIGHHeap-based Buffer Overflow in vim/vimEPSS 0.6%CVE-2022-0351HIGHAccess of Memory Location Before Start of Buffer in vim/vimEPSS 0.6%CVE-2022-1733MEDIUMHeap-based Buffer Overflow in vim/vimEPSS 0.6%CVE-2023-4738HIGHHeap-based Buffer Overflow in vim/vimEPSS 0.6%CVE-2023-4735MEDIUMOut-of-bounds Write in vim/vimEPSS 0.6%CVE-2026-34714CRITICALVim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr}EPSS 0.6%