# cve.now: VIM

The newest entries naming VIM as an affected vendor (up to 200), of 231 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-43961](https://cve.now/CVE-2026-43961.md): Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution (CVSS 7.8)
- [CVE-2026-73073](https://cve.now/CVE-2026-73073.md): Vim: Arbitrary Ex Command Execution in C Omni-Completion (CVSS 7.1)
- [CVE-2026-73078](https://cve.now/CVE-2026-73078.md): Vim: Arbitrary Code Execution via Netrw Menu Construction (CVSS 8.6)
- [CVE-2026-73077](https://cve.now/CVE-2026-73077.md): Vim: Arbitrary Code Execution via Shell Keyword Lookup (CVSS 8.4)
- [CVE-2026-73076](https://cve.now/CVE-2026-73076.md): Vim: Arbitrary Command Execution via Malicious \`.VimballRecord\` Entry Replay in \`vimball.vim\` (CVSS 8.4)
- [CVE-2026-73075](https://cve.now/CVE-2026-73075.md): Vim: Out-of-bounds Access in Popup Opacity Handling (CVSS 4.6)
- [CVE-2026-73074](https://cve.now/CVE-2026-73074.md): Vim: Heap Buffer Overflow in Text Property Handling (CVSS 7.1)
- [CVE-2026-73072](https://cve.now/CVE-2026-73072.md): Vim: Heap Buffer Overflow when Loading a Spell File (CVSS 8.5)
- [CVE-2026-73071](https://cve.now/CVE-2026-73071.md): Vim: Use-after-free in JSON Decoding (CVSS 3.3)
- [CVE-2026-73070](https://cve.now/CVE-2026-73070.md): Vim: Stack Buffer Overflow in the Vim Socket Server (CVSS 6.8)
- [CVE-2026-59856](https://cve.now/CVE-2026-59856.md): Vim: Arbitrary Code Execution via PHP Omni-Completion (CVSS 8.4)
- [CVE-2026-59858](https://cve.now/CVE-2026-59858.md): Vim: Arbitrary Code Execution via C Omni-Completion (CVSS 8.4)
- [CVE-2026-59857](https://cve.now/CVE-2026-59857.md): Vim: Out-of-bounds Write in SAL Soundfolding (CVSS 5.6)
- [CVE-2026-55693](https://cve.now/CVE-2026-55693.md): Vim: Out-of-bounds Write in Spell File Word Count (CVSS 5.7)
- [CVE-2026-55892](https://cve.now/CVE-2026-55892.md): Vim: Out-of-bounds Write in Spell File Prefix Dump (CVSS 5.5)
- [CVE-2026-55895](https://cve.now/CVE-2026-55895.md): Vim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filename (CVSS 5.7)
- [CVE-2026-57451](https://cve.now/CVE-2026-57451.md): Vim: Out-of-bounds Read in Text Property Count (CVSS 5.3)
- [CVE-2026-57452](https://cve.now/CVE-2026-57452.md): Vim: Out-of-bounds Read with libsodium-encrypted Files (CVSS 5.5)
- [CVE-2026-57453](https://cve.now/CVE-2026-57453.md): Vim: PowerShell Command Injection via Unescaped Filename in zip.vim Extraction (CVSS 6.5)
- [CVE-2026-57454](https://cve.now/CVE-2026-57454.md): Vim: Out-of-bounds Read with Text Properties (CVSS 6.8)
- [CVE-2026-57455](https://cve.now/CVE-2026-57455.md): Vim: Stack out-of-bounds write in \`spell\_soundfold\_sofo()\` via an over-length \`soundfold()\` argument (CVSS 4.0)
- [CVE-2026-57456](https://cve.now/CVE-2026-57456.md): Vim: Arbitrary Code Execution via Python Omni-Completion Docstrings (CVSS 8.4)
- [CVE-2026-52860](https://cve.now/CVE-2026-52860.md): Vim: Arbitrary Code Execution via Python Omni-Completion (CVSS 7.5)
- [CVE-2026-52859](https://cve.now/CVE-2026-52859.md): Vim: Out-of-bounds Read in Terminal Screen Snapshot (CVSS 6.9)
- [CVE-2026-52858](https://cve.now/CVE-2026-52858.md): Vim: Arbitrary Code Execution via Python Omni-Completion (CVSS 7.3)
- [CVE-2026-47162](https://cve.now/CVE-2026-47162.md): Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name (CVSS 7.3)
- [CVE-2026-47167](https://cve.now/CVE-2026-47167.md): Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex (CVSS 5.1)
- [CVE-2026-46483](https://cve.now/CVE-2026-46483.md): Vim: Command injection in tar#Vimuntar via missing shellescape {special} flag (CVSS 3.6)
- [CVE-2026-45130](https://cve.now/CVE-2026-45130.md): Vim: Heap Buffer Overflow in spell file loading (CVSS 6.6)
- [CVE-2026-44656](https://cve.now/CVE-2026-44656.md): Vim: OS Command Injection via 'path' completion (CVSS 4.6)
- [CVE-2026-42307](https://cve.now/CVE-2026-42307.md): Vim: OS Command Injection in netrw (CVSS 4.4)
- [CVE-2026-41411](https://cve.now/CVE-2026-41411.md): Vim: Command injection via backtick expansion in tag filenames (CVSS 6.6)
- [CVE-2026-39881](https://cve.now/CVE-2026-39881.md): Vim Ex command injection in Vims NetBeans integration (CVSS 5.0)
- [CVE-2026-35177](https://cve.now/CVE-2026-35177.md): Path traversal issue with zip.vim in Vim (CVSS 4.1)
- [CVE-2026-34982](https://cve.now/CVE-2026-34982.md): Vim modeline bypass via various options affects Vim \< 9.2.0276 (CVSS 8.2)
- [CVE-2026-34714](https://cve.now/CVE-2026-34714.md): Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} (CVSS 9.2)
- [CVE-2026-33412](https://cve.now/CVE-2026-33412.md): Vim affected by Command injection via newline in glob() (CVSS 5.6)
- [CVE-2026-32249](https://cve.now/CVE-2026-32249.md): NFA regex engine NULL pointer dereference affects Vim \< 9.2.0137 (CVSS 5.3)
- [CVE-2026-28422](https://cve.now/CVE-2026-28422.md): Vim has stack-buffer-overflow in build\_stl\_str\_hl() (CVSS 2.2)
- [CVE-2026-28421](https://cve.now/CVE-2026-28421.md): Vim has a heap-buffer-overflow and a segmentation fault (CVSS 5.3)
- [CVE-2026-28420](https://cve.now/CVE-2026-28420.md): Vim has Heap-based Buffer Overflow and OOB Read in :terminal (CVSS 4.4)
- [CVE-2026-28419](https://cve.now/CVE-2026-28419.md): Vim has Heap-based Buffer Underflow in Emacs tags parsing (CVSS 5.3)
- [CVE-2026-28418](https://cve.now/CVE-2026-28418.md): Vim has Heap-based Buffer Overflow in Emacs tags parsing (CVSS 4.4)
- [CVE-2026-28417](https://cve.now/CVE-2026-28417.md): Vim has OS Command Injection in netrw (CVSS 4.4)
- [CVE-2026-26269](https://cve.now/CVE-2026-26269.md): Vim has a Netbeans specialKeys Stack Buffer Overflow (CVSS 5.4)
- [CVE-2026-25749](https://cve.now/CVE-2026-25749.md): Heap Overflow in Vim (CVSS 6.6)
- [CVE-2025-66476](https://cve.now/CVE-2025-66476.md): Vim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2025-55157](https://cve.now/CVE-2025-55157.md): Vim heap use-after-free vulnerability when processing recursive tuple data types (CVSS 6.9)
- [CVE-2025-55158](https://cve.now/CVE-2025-55158.md): Vim double-free vulnerability during Vim9 script import operations (CVSS 6.9)
- [CVE-2025-53906](https://cve.now/CVE-2025-53906.md): Vim has path traversal issue with zip.vim and special crafted zip archives (CVSS 4.1)
- [CVE-2025-53905](https://cve.now/CVE-2025-53905.md): Vim has path traversial issue with tar.vim and special crafted tar files (CVSS 4.1)
- [CVE-2025-29768](https://cve.now/CVE-2025-29768.md): Vim vulnerable to potential data loss with zip.vim and special crafted zip files (CVSS 4.4)
- [CVE-2025-27423](https://cve.now/CVE-2025-27423.md): Improper Input Validation in Vim (CVSS 7.1)
- [CVE-2025-26603](https://cve.now/CVE-2025-26603.md): heap-use-after-free in function str\_to\_reg in vim/vim (CVSS 4.2)
- [CVE-2025-24014](https://cve.now/CVE-2025-24014.md): segmentation fault in win\_line() in Vim \< 9.1.1043 (CVSS 4.2)
- [CVE-2025-22134](https://cve.now/CVE-2025-22134.md): heap-buffer-overflow with visual mode in Vim \< 9.1.1003 (CVSS 4.2)
- [CVE-2024-47814](https://cve.now/CVE-2024-47814.md): use-after-free when closing buffers in Vim (CVSS 3.9)
- [CVE-2024-45306](https://cve.now/CVE-2024-45306.md): heap-buffer-overflow in Vim (CVSS 4.5)
- [CVE-2024-43802](https://cve.now/CVE-2024-43802.md): heap-buffer-overflow in ins\_typebuf() in Vim \< 9.1.0697 (CVSS 4.5)
- [CVE-2024-43790](https://cve.now/CVE-2024-43790.md): heap-buffer-overflow in do\_search() in Vim \< 9.1.0689 (CVSS 4.5)
- [CVE-2024-43374](https://cve.now/CVE-2024-43374.md): Vim heap-use-after-free in src/arglist.c:207 (CVSS 4.5)
- [CVE-2024-41965](https://cve.now/CVE-2024-41965.md): Vim \< v9.1.0648 has a double-free in dialog\_changed() (CVSS 4.2)
- [CVE-2024-41957](https://cve.now/CVE-2024-41957.md): Vim double free in src/alloc.c:616 (CVSS 4.5)
- [CVE-2023-48706](https://cve.now/CVE-2023-48706.md): Vim has heap-use-after-free at /src/charset.c:1770:12 in skipwhite (CVSS 3.6)
- [CVE-2023-48231](https://cve.now/CVE-2023-48231.md): Use-After-Free in win\_close() in vim (CVSS 3.9)
- [CVE-2023-48232](https://cve.now/CVE-2023-48232.md): Floating point Exception in adjust\_plines\_for\_skipcol() in vim (CVSS 3.9)
- [CVE-2023-48233](https://cve.now/CVE-2023-48233.md): overflow with count for :s command in vim (CVSS 2.8)
- [CVE-2023-48234](https://cve.now/CVE-2023-48234.md): overflow in nv\_z\_get\_count in vim (CVSS 2.8)
- [CVE-2023-48235](https://cve.now/CVE-2023-48235.md): overflow in ex address parsing in vim (CVSS 2.8)
- [CVE-2023-48236](https://cve.now/CVE-2023-48236.md): overflow in get\_number in vim (CVSS 2.8)
- [CVE-2023-48237](https://cve.now/CVE-2023-48237.md): overflow in shift\_line in vim (CVSS 2.8)
- [CVE-2023-46246](https://cve.now/CVE-2023-46246.md): Integer Overflow in :history command in Vim (CVSS 4.0)
- [CVE-2023-5535](https://cve.now/CVE-2023-5535.md): Use After Free in vim/vim (CVSS 7.8)
- [CVE-2023-5441](https://cve.now/CVE-2023-5441.md): NULL Pointer Dereference in vim/vim (CVSS 6.2)
- [CVE-2023-5344](https://cve.now/CVE-2023-5344.md): Heap-based Buffer Overflow in vim/vim (CVSS 4.0)
- [CVE-2023-4781](https://cve.now/CVE-2023-4781.md): Heap-based Buffer Overflow in vim/vim (CVSS 7.8)
- [CVE-2023-4733](https://cve.now/CVE-2023-4733.md): Use After Free in vim/vim (CVSS 7.3)
- [CVE-2023-4750](https://cve.now/CVE-2023-4750.md): Use After Free in vim/vim (CVSS 7.8)
- [CVE-2023-4752](https://cve.now/CVE-2023-4752.md): Use After Free in vim/vim (CVSS 7.8)
- [CVE-2023-4751](https://cve.now/CVE-2023-4751.md): Heap-based Buffer Overflow in vim/vim (CVSS 7.8)
- [CVE-2023-4738](https://cve.now/CVE-2023-4738.md): Heap-based Buffer Overflow in vim/vim (CVSS 7.8)
- [CVE-2023-4736](https://cve.now/CVE-2023-4736.md): Untrusted Search Path in vim/vim (CVSS 7.8)
- [CVE-2023-4735](https://cve.now/CVE-2023-4735.md): Out-of-bounds Write in vim/vim (CVSS 4.8)
- [CVE-2023-4734](https://cve.now/CVE-2023-4734.md): Integer Overflow or Wraparound in vim/vim (CVSS 7.8)
- [CVE-2023-2610](https://cve.now/CVE-2023-2610.md): Integer Overflow or Wraparound in vim/vim (CVSS 7.8)
- [CVE-2023-2609](https://cve.now/CVE-2023-2609.md): NULL Pointer Dereference in vim/vim (CVSS 7.8)
- [CVE-2023-2426](https://cve.now/CVE-2023-2426.md): Use of Out-of-range Pointer Offset in vim/vim (CVSS 6.8)
- [CVE-2023-1355](https://cve.now/CVE-2023-1355.md): NULL Pointer Dereference in vim/vim (CVSS 8.4)
- [CVE-2023-1264](https://cve.now/CVE-2023-1264.md): NULL Pointer Dereference in vim/vim (CVSS 6.6)
- [CVE-2023-1175](https://cve.now/CVE-2023-1175.md): Incorrect Calculation of Buffer Size in vim/vim (CVSS 7.3)
- [CVE-2023-1170](https://cve.now/CVE-2023-1170.md): Heap-based Buffer Overflow in vim/vim (CVSS 7.3)
- [CVE-2023-1127](https://cve.now/CVE-2023-1127.md): Divide By Zero in vim/vim (CVSS 7.3)
- [CVE-2023-0512](https://cve.now/CVE-2023-0512.md): Divide By Zero in vim/vim (CVSS 7.3)
- [CVE-2023-0433](https://cve.now/CVE-2023-0433.md): Heap-based Buffer Overflow in vim/vim (CVSS 7.8)
- [CVE-2023-0288](https://cve.now/CVE-2023-0288.md): Heap-based Buffer Overflow in vim/vim (CVSS 7.3)
- [CVE-2023-0054](https://cve.now/CVE-2023-0054.md): Out-of-bounds Write in vim/vim (CVSS 7.3)
- [CVE-2023-0051](https://cve.now/CVE-2023-0051.md): Heap-based Buffer Overflow in vim/vim (CVSS 7.3)
- [CVE-2023-0049](https://cve.now/CVE-2023-0049.md): Out-of-bounds Read in vim/vim (CVSS 7.3)
- [CVE-2022-4293](https://cve.now/CVE-2022-4293.md): Floating Point Comparison with Incorrect Operator in vim/vim (CVSS 6.8)
- [CVE-2022-4292](https://cve.now/CVE-2022-4292.md): Use After Free in vim/vim (CVSS 7.8)
- [CVE-2022-3491](https://cve.now/CVE-2022-3491.md): Heap-based Buffer Overflow in vim/vim (CVSS 4.0)
- [CVE-2022-3591](https://cve.now/CVE-2022-3591.md): Use After Free in vim/vim (CVSS 7.8)
- [CVE-2022-3520](https://cve.now/CVE-2022-3520.md): Heap-based Buffer Overflow in vim/vim (CVSS 7.8)
- [CVE-2022-4141](https://cve.now/CVE-2022-4141.md): Heap-based Buffer Overflow in vim/vim (CVSS 7.3)
- [CVE-2022-3352](https://cve.now/CVE-2022-3352.md): Use After Free in vim/vim (CVSS 7.8)
- [CVE-2022-3324](https://cve.now/CVE-2022-3324.md): Stack-based Buffer Overflow in vim/vim (CVSS 7.8)
- [CVE-2022-3297](https://cve.now/CVE-2022-3297.md): Use After Free in vim/vim (CVSS 7.8)
- [CVE-2022-3296](https://cve.now/CVE-2022-3296.md): Stack-based Buffer Overflow in vim/vim (CVSS 7.8)
- [CVE-2022-3278](https://cve.now/CVE-2022-3278.md): NULL Pointer Dereference in vim/vim (CVSS 6.8)
- [CVE-2022-3256](https://cve.now/CVE-2022-3256.md): Use After Free in vim/vim (CVSS 7.8)
- [CVE-2022-3235](https://cve.now/CVE-2022-3235.md): Use After Free in vim/vim (CVSS 7.8)
- [CVE-2022-3234](https://cve.now/CVE-2022-3234.md): Heap-based Buffer Overflow in vim/vim (CVSS 7.8)
- [CVE-2022-3153](https://cve.now/CVE-2022-3153.md): NULL Pointer Dereference in vim/vim (CVSS 6.1)
- [CVE-2022-3134](https://cve.now/CVE-2022-3134.md): Use After Free in vim/vim (CVSS 7.8)
- [CVE-2022-3099](https://cve.now/CVE-2022-3099.md): Use After Free in vim/vim (CVSS 7.8)
- [CVE-2022-3037](https://cve.now/CVE-2022-3037.md): Use After Free in vim/vim (CVSS 7.8)
- [CVE-2022-3016](https://cve.now/CVE-2022-3016.md): Use After Free in vim/vim (CVSS 7.8)
- [CVE-2022-2982](https://cve.now/CVE-2022-2982.md): Use After Free in vim/vim (CVSS 7.6)
- [CVE-2022-2980](https://cve.now/CVE-2022-2980.md): NULL Pointer Dereference in vim/vim (CVSS 6.3)
- [CVE-2022-2946](https://cve.now/CVE-2022-2946.md): Use After Free in vim/vim (CVSS 7.8)
- [CVE-2022-2923](https://cve.now/CVE-2022-2923.md): NULL Pointer Dereference in vim/vim (CVSS 6.6)
- [CVE-2022-2889](https://cve.now/CVE-2022-2889.md): Use After Free in vim/vim (CVSS 7.8)
- [CVE-2022-2874](https://cve.now/CVE-2022-2874.md): NULL Pointer Dereference in vim/vim (CVSS 6.6)
- [CVE-2022-2862](https://cve.now/CVE-2022-2862.md): Use After Free in vim/vim (CVSS 7.6)
- [CVE-2022-2849](https://cve.now/CVE-2022-2849.md): Heap-based Buffer Overflow in vim/vim (CVSS 7.8)
- [CVE-2022-2845](https://cve.now/CVE-2022-2845.md): Improper Validation of Specified Quantity in Input in vim/vim (CVSS 7.8)
- [CVE-2022-2819](https://cve.now/CVE-2022-2819.md): Heap-based Buffer Overflow in vim/vim (CVSS 7.8)
- [CVE-2022-2817](https://cve.now/CVE-2022-2817.md): Use After Free in vim/vim (CVSS 7.8)
- [CVE-2022-2816](https://cve.now/CVE-2022-2816.md): Out-of-bounds Read in vim/vim (CVSS 7.8)
- [CVE-2022-2581](https://cve.now/CVE-2022-2581.md): Out-of-bounds Read in vim/vim (CVSS 7.8)
- [CVE-2022-2580](https://cve.now/CVE-2022-2580.md): Heap-based Buffer Overflow in vim/vim (CVSS 7.3)
- [CVE-2022-2571](https://cve.now/CVE-2022-2571.md): Heap-based Buffer Overflow in vim/vim (CVSS 7.8)
- [CVE-2022-2598](https://cve.now/CVE-2022-2598.md): Out-of-bounds Write to API in vim/vim (CVSS 6.5)
- [CVE-2022-2522](https://cve.now/CVE-2022-2522.md): Heap-based Buffer Overflow in vim/vim (CVSS 7.8)
- [CVE-2022-2345](https://cve.now/CVE-2022-2345.md): Use After Free in vim/vim (CVSS 7.8)
- [CVE-2022-2344](https://cve.now/CVE-2022-2344.md): Heap-based Buffer Overflow in vim/vim (CVSS 7.8)
- [CVE-2022-2343](https://cve.now/CVE-2022-2343.md): Heap-based Buffer Overflow in vim/vim (CVSS 7.8)
- [CVE-2022-2304](https://cve.now/CVE-2022-2304.md): Stack-based Buffer Overflow in vim/vim (CVSS 7.8)
- [CVE-2022-2289](https://cve.now/CVE-2022-2289.md): Use After Free in vim/vim (CVSS 7.8)
- [CVE-2022-2288](https://cve.now/CVE-2022-2288.md): Out-of-bounds Write in vim/vim (CVSS 7.8)
- [CVE-2022-2287](https://cve.now/CVE-2022-2287.md): Out-of-bounds Read in vim/vim (CVSS 8.0)
- [CVE-2022-2286](https://cve.now/CVE-2022-2286.md): Out-of-bounds Read in vim/vim (CVSS 7.8)
- [CVE-2022-2285](https://cve.now/CVE-2022-2285.md): Integer Overflow or Wraparound in vim/vim (CVSS 7.8)
- [CVE-2022-2284](https://cve.now/CVE-2022-2284.md): Heap-based Buffer Overflow in vim/vim (CVSS 7.8)
- [CVE-2022-2264](https://cve.now/CVE-2022-2264.md): Heap-based Buffer Overflow in vim/vim (CVSS 7.8)
- [CVE-2022-2257](https://cve.now/CVE-2022-2257.md): Out-of-bounds Read in vim/vim (CVSS 7.8)
- [CVE-2022-2231](https://cve.now/CVE-2022-2231.md): NULL Pointer Dereference in vim/vim (CVSS 7.8)
- [CVE-2022-2210](https://cve.now/CVE-2022-2210.md): Out-of-bounds Write in vim/vim (CVSS 7.8)
- [CVE-2022-2208](https://cve.now/CVE-2022-2208.md): NULL Pointer Dereference in vim/vim (CVSS 7.8)
- [CVE-2022-2207](https://cve.now/CVE-2022-2207.md): Heap-based Buffer Overflow in vim/vim (CVSS 7.8)
- [CVE-2022-2206](https://cve.now/CVE-2022-2206.md): Out-of-bounds Read in vim/vim (CVSS 7.8)
- [CVE-2022-2183](https://cve.now/CVE-2022-2183.md): Out-of-bounds Read in vim/vim (CVSS 7.8)
- [CVE-2022-2182](https://cve.now/CVE-2022-2182.md): Heap-based Buffer Overflow in vim/vim (CVSS 7.8)
- [CVE-2022-2175](https://cve.now/CVE-2022-2175.md): Buffer Over-read in vim/vim (CVSS 7.8)
- [CVE-2022-2129](https://cve.now/CVE-2022-2129.md): Out-of-bounds Write in vim/vim (CVSS 7.8)
- [CVE-2022-2126](https://cve.now/CVE-2022-2126.md): Out-of-bounds Read in vim/vim (CVSS 7.8)
- [CVE-2022-2125](https://cve.now/CVE-2022-2125.md): Heap-based Buffer Overflow in vim/vim (CVSS 7.8)
- [CVE-2022-2124](https://cve.now/CVE-2022-2124.md): Buffer Over-read in vim/vim (CVSS 7.8)
- [CVE-2022-2042](https://cve.now/CVE-2022-2042.md): Use After Free in vim/vim (CVSS 7.4)
- [CVE-2022-2000](https://cve.now/CVE-2022-2000.md): Out-of-bounds Write in vim/vim (CVSS 7.8)
- [CVE-2022-1968](https://cve.now/CVE-2022-1968.md): Use After Free in vim/vim (CVSS 7.8)
- [CVE-2022-1942](https://cve.now/CVE-2022-1942.md): Heap-based Buffer Overflow in vim/vim (CVSS 7.8)
- [CVE-2022-1927](https://cve.now/CVE-2022-1927.md): Buffer Over-read in vim/vim (CVSS 7.8)
- [CVE-2022-1898](https://cve.now/CVE-2022-1898.md): Use After Free in vim/vim (CVSS 7.8)
- [CVE-2022-1897](https://cve.now/CVE-2022-1897.md): Out-of-bounds Write in vim/vim (CVSS 7.8)
- [CVE-2022-1886](https://cve.now/CVE-2022-1886.md): Heap-based Buffer Overflow in vim/vim (CVSS 7.1)
- [CVE-2022-1851](https://cve.now/CVE-2022-1851.md): Out-of-bounds Read in vim/vim (CVSS 7.8)
- [CVE-2022-1796](https://cve.now/CVE-2022-1796.md): Use After Free in vim/vim (CVSS 6.6)
- [CVE-2022-1785](https://cve.now/CVE-2022-1785.md): Out-of-bounds Write in vim/vim (CVSS 7.3)
- [CVE-2022-1771](https://cve.now/CVE-2022-1771.md): Uncontrolled Recursion in vim/vim (CVSS 5.5)
- [CVE-2022-1769](https://cve.now/CVE-2022-1769.md): Buffer Over-read in vim/vim (CVSS 6.6)
- [CVE-2022-1735](https://cve.now/CVE-2022-1735.md): Classic Buffer Overflow in vim/vim (CVSS 6.6)
- [CVE-2022-1733](https://cve.now/CVE-2022-1733.md): Heap-based Buffer Overflow in vim/vim (CVSS 6.6)
- [CVE-2022-1725](https://cve.now/CVE-2022-1725.md): NULL Pointer Dereference in vim/vim (CVSS 6.6)
- [CVE-2022-1720](https://cve.now/CVE-2022-1720.md): Buffer Over-read in function grab\_file\_name in vim/vim (CVSS 6.6)
- [CVE-2022-1674](https://cve.now/CVE-2022-1674.md): NULL Pointer Dereference in function vim\_regexec\_string at regexp.c:2733 in vim/vim (CVSS 6.6)
- [CVE-2022-1629](https://cve.now/CVE-2022-1629.md): Buffer Over-read in function find\_next\_quote in vim/vim (CVSS 6.6)
- [CVE-2022-1621](https://cve.now/CVE-2022-1621.md): Heap buffer overflow in vim\_strncpy find\_word in vim/vim (CVSS 7.3)
- [CVE-2022-1620](https://cve.now/CVE-2022-1620.md): NULL Pointer Dereference in function vim\_regexec\_string at regexp.c:2729 in vim/vim (CVSS 6.6)
- [CVE-2022-1619](https://cve.now/CVE-2022-1619.md): Heap-based Buffer Overflow in function cmdline\_erase\_chars in vim/vim (CVSS 6.1)
- [CVE-2022-1616](https://cve.now/CVE-2022-1616.md): Use after free in append\_command in vim/vim (CVSS 7.3)
- [CVE-2022-1420](https://cve.now/CVE-2022-1420.md): Use of Out-of-range Pointer Offset in vim/vim (CVSS 6.8)
- [CVE-2022-1381](https://cve.now/CVE-2022-1381.md): global heap buffer overflow in skip\_range in vim/vim (CVSS 7.8)
- [CVE-2022-1160](https://cve.now/CVE-2022-1160.md): heap buffer overflow in get\_one\_sourceline in vim/vim (CVSS 7.3)
- [CVE-2022-1154](https://cve.now/CVE-2022-1154.md): Use after free in utf\_ptr2char in vim/vim (CVSS 7.8)
- [CVE-2022-0943](https://cve.now/CVE-2022-0943.md): Heap-based Buffer Overflow occurs in vim in vim/vim (CVSS 8.4)
- [CVE-2022-0729](https://cve.now/CVE-2022-0729.md): Use of Out-of-range Pointer Offset in vim/vim (CVSS 7.8)
- [CVE-2022-0714](https://cve.now/CVE-2022-0714.md): Heap-based Buffer Overflow in vim/vim (CVSS 8.4)
- [CVE-2022-0696](https://cve.now/CVE-2022-0696.md): NULL Pointer Dereference in vim/vim (CVSS 6.2)
- [CVE-2022-0685](https://cve.now/CVE-2022-0685.md): Use of Out-of-range Pointer Offset in vim/vim (CVSS 8.4)
- [CVE-2022-0629](https://cve.now/CVE-2022-0629.md): Stack-based Buffer Overflow in vim/vim (CVSS 8.4)
- [CVE-2022-0572](https://cve.now/CVE-2022-0572.md): Heap-based Buffer Overflow in vim/vim (CVSS 8.4)
- [CVE-2022-0554](https://cve.now/CVE-2022-0554.md): Use of Out-of-range Pointer Offset in vim/vim (CVSS 8.4)
- [CVE-2022-0443](https://cve.now/CVE-2022-0443.md): Use After Free in vim/vim (CVSS 8.4)
- [CVE-2022-0417](https://cve.now/CVE-2022-0417.md): Heap-based Buffer Overflow in vim/vim (CVSS 8.4)
- [CVE-2022-0407](https://cve.now/CVE-2022-0407.md): Heap-based Buffer Overflow in vim/vim (CVSS 5.7)
- [CVE-2022-0413](https://cve.now/CVE-2022-0413.md): Use After Free in vim/vim (CVSS 8.4)
- [CVE-2022-0408](https://cve.now/CVE-2022-0408.md): Stack-based Buffer Overflow in vim/vim (CVSS 8.4)
- [CVE-2022-0393](https://cve.now/CVE-2022-0393.md): Out-of-bounds Read in vim/vim (CVSS 8.4)
- [CVE-2022-0392](https://cve.now/CVE-2022-0392.md): Heap-based Buffer Overflow in vim/vim (CVSS 6.1)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/vim
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.