VIM vulnerabilities
231 CVEs and advisories name VIM as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-42307Vim: OS Command Injection in netrw
- CVE-2026-41411Vim: Command injection via backtick expansion in tag filenames
- CVE-2026-39881Vim Ex command injection in Vims NetBeans integration
- CVE-2026-35177Path traversal issue with zip.vim in Vim
- CVE-2026-34982Vim modeline bypass via various options affects Vim < 9.2.0276
- CVE-2026-34714Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr}
- CVE-2026-33412Vim affected by Command injection via newline in glob()
- CVE-2026-32249NFA regex engine NULL pointer dereference affects Vim < 9.2.0137
- CVE-2026-28422Vim has stack-buffer-overflow in build_stl_str_hl()
- CVE-2026-28421Vim has a heap-buffer-overflow and a segmentation fault
- CVE-2026-28420Vim has Heap-based Buffer Overflow and OOB Read in :terminal
- CVE-2026-28419Vim has Heap-based Buffer Underflow in Emacs tags parsing
- CVE-2026-28418Vim has Heap-based Buffer Overflow in Emacs tags parsing
- CVE-2026-28417Vim has OS Command Injection in netrw
- CVE-2026-26269Vim has a Netbeans specialKeys Stack Buffer Overflow
- CVE-2026-25749Heap Overflow in Vim
- CVE-2025-66476Vim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerability
- CVE-2025-55157Vim heap use-after-free vulnerability when processing recursive tuple data types
- CVE-2025-55158Vim double-free vulnerability during Vim9 script import operations
- CVE-2025-53906Vim has path traversal issue with zip.vim and special crafted zip archives
- CVE-2025-53905Vim has path traversial issue with tar.vim and special crafted tar files
- CVE-2025-29768Vim vulnerable to potential data loss with zip.vim and special crafted zip files
- CVE-2025-27423Improper Input Validation in Vim
- CVE-2025-26603heap-use-after-free in function str_to_reg in vim/vim
- CVE-2025-24014segmentation fault in win_line() in Vim < 9.1.1043
- CVE-2025-22134heap-buffer-overflow with visual mode in Vim < 9.1.1003
- CVE-2024-47814use-after-free when closing buffers in Vim
- CVE-2024-45306heap-buffer-overflow in Vim
- CVE-2024-43802heap-buffer-overflow in ins_typebuf() in Vim < 9.1.0697
- CVE-2024-43790heap-buffer-overflow in do_search() in Vim < 9.1.0689