Vulnerabilidades em Vim
231 resultadosAnálise Vexday
O Vim apresenta um perfil de risco baixo com apenas 1 vulnerabilidade crítica registrada (CWE-78 - execução de comando), sem evidência de exploração ativa em campo (KEV=0). A vulnerabilidade não foi publicada recentemente, reduzindo a urgência de resposta imediata, embora o tipo de fraqueza (command injection) mantenha relevância em cenários de risco elevado.
CVE-2022-2889HIGHUse After Free in vim/vimEPSS 0.5%CVE-2022-3037HIGHUse After Free in vim/vimEPSS 0.5%CVE-2022-2580HIGHHeap-based Buffer Overflow in vim/vimEPSS 0.5%CVE-2023-0051HIGHHeap-based Buffer Overflow in vim/vimEPSS 0.5%CVE-2022-1725MEDIUMNULL Pointer Dereference in vim/vimEPSS 0.5%CVE-2022-3324HIGHStack-based Buffer Overflow in vim/vimEPSS 0.5%CVE-2022-3491MEDIUMHeap-based Buffer Overflow in vim/vimEPSS 0.5%CVE-2023-4736HIGHUntrusted Search Path in vim/vimEPSS 0.5%CVE-2022-3235HIGHUse After Free in vim/vimEPSS 0.5%CVE-2026-41411MEDIUMVim: Command injection via backtick expansion in tag filenamesEPSS 0.5%CVE-2022-2581HIGHOut-of-bounds Read in vim/vimEPSS 0.5%CVE-2022-2923MEDIUMNULL Pointer Dereference in vim/vimEPSS 0.5%CVE-2023-1170HIGHHeap-based Buffer Overflow in vim/vimEPSS 0.5%CVE-2022-1785HIGHOut-of-bounds Write in vim/vimEPSS 0.5%CVE-2022-2571HIGHHeap-based Buffer Overflow in vim/vimEPSS 0.5%CVE-2022-3099HIGHUse After Free in vim/vimEPSS 0.5%CVE-2022-3352HIGHUse After Free in vim/vimEPSS 0.5%CVE-2023-0512HIGHDivide By Zero in vim/vimEPSS 0.5%CVE-2022-3256HIGHUse After Free in vim/vimEPSS 0.5%CVE-2022-3153MEDIUMNULL Pointer Dereference in vim/vimEPSS 0.5%