Vim vulnerabilities
125 known CVE vulnerabilities in Vim, translated and rated.
- CVE-2022-2207High
Heap-based buffer overflow in Vim prior to 8.2. The vulnerability may allow an attacker to execute code or cause a crash.
- CVE-2022-2206High
Out-of-bounds read vulnerability in vim prior to version 8.2. Could lead to data disclosure or program crash.
- CVE-2022-2183High
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. It may lead to reading data outside the intended memory bounds.
- CVE-2022-2182High
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. It can lead to heap buffer overflow.
- CVE-2022-2175High
Buffer Over-read vulnerability in vim prior to version 8.2. Could lead to data disclosure or crash.
- CVE-2022-2129High
Out-of-bounds write in Vim prior to 8.2. May lead to memory corruption or code execution.
- CVE-2022-2126High
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. It may lead to reading data outside the intended memory bounds.
- CVE-2022-2125High
Heap-based buffer overflow in GitHub repository vim/vim prior to 8.2, which could lead to crashes or potential code execution.
- CVE-2022-2124High
Buffer Over-read in GitHub repository vim/vim prior to 8.2. It can cause reading beyond the buffer.
- CVE-2022-2042High
Use After Free in GitHub repository vim/vim prior to 8.2. It can lead to use of freed memory.
- CVE-2022-1674Medium
NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 allows attackers to cause a denial of service (application crash) via a crafted input.
- CVE-2022-1620High
NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in GitHub repository vim/vim prior to 8.2.4901 allows attackers to cause a denial of service (application crash) via a crafted input.
- CVE-2022-1619High
Heap-based Buffer Overflow in function cmdline_erase_chars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing software, modify memory, and possible remote execution
- CVE-2022-1616High
Use after free in append_command in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution.
- CVE-2022-0351High
Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2.
- CVE-2022-0213Medium
vim is vulnerable to a heap-based buffer overflow. Technical details are not provided in the description.
- CVE-2021-4187High
vim is vulnerable to a use-after-free.
- CVE-2021-4173High
vim is vulnerable to a use-after-free.
- CVE-2021-4166High
Vim is vulnerable to out-of-bounds read, which could lead to information disclosure or crash.
- CVE-2021-4136High
Vim is vulnerable to heap-based buffer overflow, which could lead to crashes or potential code execution.
- CVE-2021-3973High
Vim is vulnerable to heap-based buffer overflow, which could lead to crashes or potential code execution.
- CVE-2021-3968High
vim is vulnerable to Heap-based Buffer Overflow
- CVE-2021-3974High
Use After Free vulnerability in vim. Could lead to arbitrary code execution or crash.
- CVE-2021-3928High
vim is vulnerable to Use of Uninitialized Variable.
- CVE-2021-3927High
Vim is vulnerable to heap-based buffer overflow, which could lead to crashes or potential code execution.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

