Vim

Products

Exploited and recent CVEs

• CVE-2026-43961 High 7.8 Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution 0.2%
• CVE-2026-73073 High 7.1 Vim: Arbitrary Ex Command Execution in C Omni-Completion 0.2%
• CVE-2026-73078 High 8.6 Vim: Arbitrary Code Execution via Netrw Menu Construction 0.3%
• CVE-2026-73077 High 8.4 Vim: Arbitrary Code Execution via Shell Keyword Lookup 0.1%
• CVE-2026-73076 High 8.4 Vim: Arbitrary Command Execution via Malicious `.VimballRecord` Entry Replay in `vimball.vim` 0.1%
• CVE-2026-73075 Medium 4.6 Vim: Out-of-bounds Access in Popup Opacity Handling <0.1%
• CVE-2026-73074 High 7.1 Vim: Heap Buffer Overflow in Text Property Handling <0.1%
• CVE-2026-73072 High 8.5 Vim: Heap Buffer Overflow when Loading a Spell File 0.1%
• CVE-2026-73071 Low 3.3 Vim: Use-after-free in JSON Decoding 0.1%
• CVE-2026-73070 Medium 6.8 Vim: Stack Buffer Overflow in the Vim Socket Server 0.2%
• CVE-2026-59856 High 8.4 Vim: Arbitrary Code Execution via PHP Omni-Completion 0.2%
• CVE-2026-59858 High 8.4 Vim: Arbitrary Code Execution via C Omni-Completion 0.1%
• CVE-2026-59857 Medium 5.6 Vim: Out-of-bounds Write in SAL Soundfolding 0.1%
• CVE-2026-55693 Medium 5.7 Vim: Out-of-bounds Write in Spell File Word Count 0.1%
• CVE-2026-55892 Medium 5.5 Vim: Out-of-bounds Write in Spell File Prefix Dump 0.1%
• CVE-2026-55895 Medium 5.7 Vim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filename 0.2%
• CVE-2026-57451 Medium 5.3 Vim: Out-of-bounds Read in Text Property Count 0.2%
• CVE-2026-57452 Medium 5.5 Vim: Out-of-bounds Read with libsodium-encrypted Files 0.2%
• CVE-2026-57453 Medium 6.5 Vim: PowerShell Command Injection via Unescaped Filename in zip.vim Extraction 0.2%
• CVE-2026-57454 Medium 6.8 Vim: Out-of-bounds Read with Text Properties 0.2%
• CVE-2026-57455 Medium 4.0 Vim: Stack out-of-bounds write in `spell_soundfold_sofo()` via an over-length `soundfold()` argument 0.1%
• CVE-2026-57456 High 8.4 Vim: Arbitrary Code Execution via Python Omni-Completion Docstrings 0.1%
• CVE-2026-52860 High 8.0 Vim: Arbitrary Code Execution via Python Omni-Completion 0.2%
• CVE-2026-52859 Medium 6.9 Vim: Out-of-bounds Read in Terminal Screen Snapshot 0.3%
• CVE-2026-52858 High 7.3 Vim: Arbitrary Code Execution via Python Omni-Completion 0.2%
• CVE-2026-47162 High 7.3 Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name 0.3%
• CVE-2026-47167 Medium 5.1 Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex 0.1%
• CVE-2026-46483 Low 3.6 Vim: Command injection in tar#Vimuntar via missing shellescape {special} flag 0.6%
• CVE-2026-45130 Medium 6.6 Vim: Heap Buffer Overflow in spell file loading 0.2%
• CVE-2026-44656 Medium 4.6 Vim: OS Command Injection via 'path' completion 0.9%