Vulnerabilidades em Vim
231 resultadosAnálise Vexday
O Vim apresenta um perfil de risco baixo com apenas 1 vulnerabilidade crítica registrada (CWE-78 - execução de comando), sem evidência de exploração ativa em campo (KEV=0). A vulnerabilidade não foi publicada recentemente, reduzindo a urgência de resposta imediata, embora o tipo de fraqueza (command injection) mantenha relevância em cenários de risco elevado.
CVE-2022-2522HIGHHeap-based Buffer Overflow in vim/vimEPSS 0.6%CVE-2023-4734HIGHInteger Overflow or Wraparound in vim/vimEPSS 0.6%CVE-2022-2819HIGHHeap-based Buffer Overflow in vim/vimEPSS 0.6%CVE-2023-4752HIGHUse After Free in vim/vimEPSS 0.6%CVE-2022-3134HIGHUse After Free in vim/vimEPSS 0.6%CVE-2023-4751HIGHHeap-based Buffer Overflow in vim/vimEPSS 0.6%CVE-2022-3296HIGHStack-based Buffer Overflow in vim/vimEPSS 0.6%CVE-2023-0433HIGHHeap-based Buffer Overflow in vim/vimEPSS 0.6%CVE-2026-46483LOWVim: Command injection in tar#Vimuntar via missing shellescape {special} flagEPSS 0.6%CVE-2022-2816HIGHOut-of-bounds Read in vim/vimEPSS 0.5%CVE-2023-48706LOWVim has heap-use-after-free at /src/charset.c:1770:12 in skipwhiteEPSS 0.5%CVE-2023-4733HIGHUse After Free in vim/vimEPSS 0.5%CVE-2023-5535HIGHUse After Free in vim/vimEPSS 0.5%CVE-2023-4750HIGHUse After Free in vim/vimEPSS 0.5%CVE-2022-3234HIGHHeap-based Buffer Overflow in vim/vimEPSS 0.5%CVE-2022-2946HIGHUse After Free in vim/vimEPSS 0.5%CVE-2022-2817HIGHUse After Free in vim/vimEPSS 0.5%CVE-2022-2845HIGHImproper Validation of Specified Quantity in Input in vim/vimEPSS 0.5%CVE-2022-3297HIGHUse After Free in vim/vimEPSS 0.5%CVE-2022-3016HIGHUse After Free in vim/vimEPSS 0.5%