Vulnerabilidades em vim

221 resultados
Análise Vexday

O editor de texto Vim acumula 217 CVEs catalogadas, volume considerável para uma ferramenta de linha de comando, com 22 novas entradas registradas apenas nos últimos 90 dias — indicando atividade contínua de pesquisa e reporte de falhas. Apesar desse volume, nenhuma CVE atingiu severidade crítica, nenhuma possui prova de conceito pública disponível e a taxa de exploração ativa é zero, posicionando o Vim abaixo da média geral do catálogo CISA KEV. A falha de maior atenção no momento é CVE-2022-0572, com escore EPSS de 0,2658 — o mais alto observado no conjunto —, e o tipo de falha predominante é CWE-122 (heap-based buffer overflow), padrão que exige atenção em ambientes onde o editor processa arquivos de origens não confiáveis. O perfil geral sugere risco operacional moderado e gerenciável, desde que atualizações sejam aplicadas de forma consistente.

CVE-2022-0572HIGHHeap-based Buffer Overflow in vim/vimEPSS 26.6%CVE-2025-27423HIGHImproper Input Validation in VimEPSS 22.5%CVE-2022-0714HIGHHeap-based Buffer Overflow in vim/vimEPSS 12.3%CVE-2022-1381HIGHglobal heap buffer overflow in skip_range in vim/vimEPSS 3.1%CVE-2022-1616HIGHUse after free in append_command in vim/vimEPSS 2.7%CVE-2022-1619MEDIUMHeap-based Buffer Overflow in function cmdline_erase_chars in vim/vimEPSS 2.6%CVE-2022-1621HIGHHeap buffer overflow in vim_strncpy find_word in vim/vimEPSS 2.4%CVE-2022-1720MEDIUMBuffer Over-read in function grab_file_name in vim/vimEPSS 2.2%CVE-2022-0318MEDIUMHeap-based Buffer Overflow in vim/vimEPSS 2.1%CVE-2021-3968HIGHHeap-based Buffer Overflow in vim/vimEPSS 2.1%CVE-2022-1629MEDIUMBuffer Over-read in function find_next_quote in vim/vimEPSS 1.9%CVE-2021-4136HIGHHeap-based Buffer Overflow in vim/vimEPSS 1.8%CVE-2022-0629HIGHStack-based Buffer Overflow in vim/vimEPSS 1.8%CVE-2021-4019HIGHHeap-based Buffer Overflow in vim/vimEPSS 1.8%CVE-2021-4193MEDIUMOut-of-bounds Read in vim/vimEPSS 1.8%CVE-2021-3796HIGHUse After Free in vim/vimEPSS 1.7%CVE-2022-0128HIGHOut-of-bounds Read in vim/vimEPSS 1.7%CVE-2021-3778HIGHHeap-based Buffer Overflow in vim/vimEPSS 1.7%CVE-2021-4192MEDIUMUse After Free in vim/vimEPSS 1.7%CVE-2022-0685HIGHUse of Out-of-range Pointer Offset in vim/vimEPSS 1.7%