CVE-2026-43961Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution Exploitation status Not known exploited Fix YesAffected product V vim Published 08/19/2026 Severity High CVE-2026-73073Vim: Arbitrary Ex Command Execution in C Omni-Completion Exploitation status Not known exploited Fix YesAffected product V vim Published 08/18/2026 Severity High CVE-2026-73078Vim: Arbitrary Code Execution via Netrw Menu Construction Exploitation status Not known exploited Fix YesAffected product V vim Published 08/11/2026 Severity High CVE-2026-73077Vim: Arbitrary Code Execution via Shell Keyword Lookup Exploitation status Not known exploited Fix YesAffected product V vim Published 08/11/2026 Severity High CVE-2026-73076Vim: Arbitrary Command Execution via Malicious `.VimballRecord` Entry Replay in `vimball.vim` Exploitation status Not known exploited Fix YesAffected product V vim Published 08/11/2026 Severity High CVE-2026-73075Vim: Out-of-bounds Access in Popup Opacity Handling Exploitation status Not known exploited Fix YesAffected product V vim Published 08/11/2026 Severity Medium CVE-2026-73074Vim: Heap Buffer Overflow in Text Property Handling Exploitation status Not known exploited Fix YesAffected product V vim Published 08/11/2026 Severity High CVE-2026-73072Vim: Heap Buffer Overflow when Loading a Spell File Exploitation status Not known exploited Fix YesAffected product V vim Published 08/11/2026 Severity High CVE-2026-73071Vim: Use-after-free in JSON Decoding Exploitation status Not known exploited Fix YesAffected product V vim Published 08/11/2026 Severity Low CVE-2026-73070Vim: Stack Buffer Overflow in the Vim Socket Server Exploitation status Not known exploited Fix YesAffected product V vim Published 08/11/2026 Severity Medium CVE-2026-51400CVE-2026-51400 Exploitation status Not known exploited Fix Not confirmed Affected product Not confirmed Published 08/04/2026 Severity High CVE-2026-51401CVE-2026-51401 Exploitation status Not known exploited Fix Not confirmed Affected product Not confirmed Published 08/04/2026 Severity High CVE-2026-59856Vim: Arbitrary Code Execution via PHP Omni-Completion Exploitation status Not known exploited Fix YesAffected product V vim Published 07/09/2026 Severity High CVE-2026-59858Vim: Arbitrary Code Execution via C Omni-Completion Exploitation status Not known exploited Fix YesAffected product V vim Published 07/09/2026 Severity High CVE-2026-59857Vim: Out-of-bounds Write in SAL Soundfolding Exploitation status Not known exploited Fix YesAffected product V vim Published 07/09/2026 Severity Medium CVE-2026-55693Vim: Out-of-bounds Write in Spell File Word Count Exploitation status Not known exploited Fix YesAffected product V vim Published 06/25/2026 Severity Medium CVE-2026-55892Vim: Out-of-bounds Write in Spell File Prefix Dump Exploitation status Not known exploited Fix YesAffected product V vim Published 06/25/2026 Severity Medium CVE-2026-55895Vim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filename Exploitation status Not known exploited Fix YesAffected product V vim Published 06/25/2026 Severity Medium CVE-2026-57451Vim: Out-of-bounds Read in Text Property Count Exploitation status Not known exploited Fix YesAffected product V vim Published 06/25/2026 Severity Medium CVE-2026-57452Vim: Out-of-bounds Read with libsodium-encrypted Files Exploitation status Not known exploited Fix YesAffected product V vim Published 06/25/2026 Severity Medium CVE-2026-57453Vim: PowerShell Command Injection via Unescaped Filename in zip.vim Extraction Exploitation status Not known exploited Fix YesAffected product V vim Published 06/25/2026 Severity Medium CVE-2026-57454Vim: Out-of-bounds Read with Text Properties Exploitation status Not known exploited Fix YesAffected product V vim Published 06/25/2026 Severity Medium CVE-2026-57455Vim: Stack out-of-bounds write in `spell_soundfold_sofo()` via an over-length `soundfold()` argument Exploitation status Not known exploited Fix YesAffected product V vim Published 06/25/2026 Severity Medium CVE-2026-57456Vim: Arbitrary Code Execution via Python Omni-Completion Docstrings Exploitation status Not known exploited Fix YesAffected product V vim Published 06/25/2026 Severity High CVE-2026-52860Vim: Arbitrary Code Execution via Python Omni-Completion Exploitation status Not known exploited Fix YesAffected product V vim Published 06/11/2026 Severity High CVE-2026-52859Vim: Out-of-bounds Read in Terminal Screen Snapshot Exploitation status Not known exploited Fix YesAffected product V vim Published 06/11/2026 Severity Medium CVE-2026-52858Vim: Arbitrary Code Execution via Python Omni-Completion Exploitation status Not known exploited Fix YesAffected product V vim Published 06/11/2026 Severity High CVE-2026-47162Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name Exploitation status Not known exploited Fix YesAffected product V vim Published 06/11/2026 Severity High CVE-2026-47167Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex Exploitation status Not known exploited Fix YesAffected product V vim Published 06/11/2026 Severity Medium CVE-2026-46483Vim: Command injection in tar#Vimuntar via missing shellescape {special} flag Exploitation status Not known exploited Fix YesAffected product V vim Published 05/15/2026 Severity Low CVE-2026-45130Vim: Heap Buffer Overflow in spell file loading Exploitation status Not known exploited Fix YesAffected product V vim Published 05/08/2026 Severity Medium CVE-2026-44656Vim: OS Command Injection via 'path' completion Exploitation status Not known exploited Fix YesAffected product V vim Published 05/08/2026 Severity Medium CVE-2026-42307Vim: OS Command Injection in netrw Exploitation status Not known exploited Fix YesAffected product V vim Published 05/08/2026 Severity Medium CVE-2026-41411Vim: Command injection via backtick expansion in tag filenames Exploitation status Not known exploited Fix Not confirmed Affected product V vim Published 04/24/2026 Severity Medium CVE-2026-39881Vim Ex command injection in Vims NetBeans integration Exploitation status Not known exploited Fix YesAffected product V vim Published 04/08/2026 Severity Medium CVE-2026-35177Path traversal issue with zip.vim in Vim Exploitation status Not known exploited Fix YesAffected product V vim Published 04/06/2026 Severity Medium CVE-2026-34982Vim modeline bypass via various options affects Vim < 9.2.0276 Exploitation status Not known exploited Fix Not confirmed Affected product V vim Published 04/06/2026 Severity High CVE-2026-34714CVE-2026-34714 Exploitation status Not known exploited Fix YesAffected product V vim Published 03/30/2026 Severity Critical CVE-2026-33412Vim affected by Command injection via newline in glob() Exploitation status Not known exploited Fix YesAffected product V vim Published 03/24/2026 Severity High CVE-2026-32249NFA regex engine NULL pointer dereference affects Vim < 9.2.0137 Exploitation status Not known exploited Fix YesAffected product V vim Published 03/12/2026 Severity Medium CVE-2026-28422Vim has stack-buffer-overflow in build_stl_str_hl() Exploitation status Not known exploited Fix Not confirmed Affected product V vim Published 02/27/2026 Severity Low CVE-2026-28421Vim has a heap-buffer-overflow and a segmentation fault Exploitation status Not known exploited Fix Not confirmed Affected product V vim Published 02/27/2026 Severity Medium CVE-2026-28420Vim has Heap-based Buffer Overflow and OOB Read in :terminal Exploitation status Not known exploited Fix Not confirmed Affected product V vim Published 02/27/2026 Severity Medium CVE-2026-28419Vim has Heap-based Buffer Underflow in Emacs tags parsing Exploitation status Not known exploited Fix Not confirmed Affected product V vim Published 02/27/2026 Severity Medium CVE-2026-28418Vim has Heap-based Buffer Overflow in Emacs tags parsing Exploitation status Not known exploited Fix Not confirmed Affected product V vim Published 02/27/2026 Severity Medium CVE-2026-28417Vim has OS Command Injection in netrw Exploitation status Not known exploited Fix Not confirmed Affected product V vim Published 02/27/2026 Severity Medium CVE-2026-26269Vim has a Netbeans specialKeys Stack Buffer Overflow Exploitation status Not known exploited Fix YesAffected product V vim Published 02/13/2026 Severity Medium CVE-2026-25749Heap Overflow in Vim Exploitation status Not known exploited Fix YesAffected product V vim Published 02/06/2026 Severity Medium CVE-2025-66476Vim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerability Exploitation status Not known exploited Fix Not confirmed Affected product V vim Published 12/02/2025 Severity High CVE-2025-9390vim xxd xxd.c main buffer overflow Exploitation status Public exploit Fix YesAffected product V vim Published 08/24/2025 Severity Medium CVE-2025-9389vim memmove-vec-unaligned-erms.S __memmove_avx_unaligned_erms memory corruption Exploitation status Public exploit Fix Not confirmed Affected product V vim Published 08/24/2025 Severity Medium CVE-2025-55157Vim heap use-after-free vulnerability when processing recursive tuple data types Exploitation status Not known exploited Fix YesAffected product V vim Published 08/11/2025 Severity Medium CVE-2025-55158Vim double-free vulnerability during Vim9 script import operations Exploitation status Not known exploited Fix YesAffected product V vim Published 08/11/2025 Severity Medium CVE-2025-53906Vim has path traversal issue with zip.vim and special crafted zip archives Exploitation status Public exploit Fix Not confirmed Affected product V vim Published 07/15/2025 Severity Medium CVE-2025-53905Vim has path traversial issue with tar.vim and special crafted tar files Exploitation status Public exploit Fix Not confirmed Affected product V vim Published 07/15/2025 Severity Medium CVE-2025-29768Vim vulnerable to potential data loss with zip.vim and special crafted zip files Exploitation status Not known exploited Fix YesAffected product V vim Published 03/13/2025 Severity Medium CVE-2025-27423Improper Input Validation in Vim Exploitation status Not known exploited Fix YesAffected product V vim Published 03/03/2025 Severity High CVE-2025-26603heap-use-after-free in function str_to_reg in vim/vim Exploitation status Not known exploited Fix Not confirmed Affected product V vim Published 02/18/2025 Severity Medium CVE-2025-1215vim main.c memory corruption Exploitation status Public exploit Fix YesAffected product V vim Published 02/12/2025 Severity Low CVE-2025-24014segmentation fault in win_line() in Vim < 9.1.1043 Exploitation status Not known exploited Fix YesAffected product V vim Published 01/20/2025 Severity Medium CVE-2025-22134heap-buffer-overflow with visual mode in Vim < 9.1.1003 Exploitation status Not known exploited Fix YesAffected product V vim Published 01/13/2025 Severity Medium CVE-2024-47814use-after-free when closing buffers in Vim Exploitation status Not known exploited Fix Not confirmed Affected product V vim Published 10/07/2024 Severity Low CVE-2024-45306heap-buffer-overflow in Vim Exploitation status Not known exploited Fix Not confirmed Affected product V vim Published 09/02/2024 Severity Medium CVE-2024-43802heap-buffer-overflow in ins_typebuf() in Vim < 9.1.0697 Exploitation status Not known exploited Fix YesAffected product V vim Published 08/26/2024 Severity Medium CVE-2024-43790heap-buffer-overflow in do_search() in Vim < 9.1.0689 Exploitation status Not known exploited Fix YesAffected product V vim Published 08/22/2024 Severity Medium CVE-2024-43374Vim heap-use-after-free in src/arglist.c:207 Exploitation status Not known exploited Fix YesAffected product V vim Published 08/15/2024 Severity Medium CVE-2024-41965Vim < v9.1.0648 has a double-free in dialog_changed() Exploitation status Not known exploited Fix YesAffected product V vim Published 08/01/2024 Severity Medium CVE-2024-41957Vim double free in src/alloc.c:616 Exploitation status Not known exploited Fix YesAffected product V vim Published 08/01/2024 Severity Medium CVE-2024-22667CVE-2024-22667 Exploitation status Public exploit Fix Not confirmed Affected product Not confirmed Published 02/05/2024 Severity High CVE-2023-48706Vim has heap-use-after-free at /src/charset.c:1770:12 in skipwhite Exploitation status Public exploit Fix Not confirmed Affected product V vim Published 11/22/2023 Severity Low CVE-2023-48231Use-After-Free in win_close() in vim Exploitation status Not known exploited Fix Not confirmed Affected product V vim Published 11/16/2023 Severity Low CVE-2023-48232Floating point Exception in adjust_plines_for_skipcol() in vim Exploitation status Not known exploited Fix Not confirmed Affected product V vim Published 11/16/2023 Severity Low CVE-2023-48233overflow with count for :s command in vim Exploitation status Not known exploited Fix Not confirmed Affected product V vim Published 11/16/2023 Severity Low CVE-2023-48234overflow in nv_z_get_count in vim Exploitation status Not known exploited Fix Not confirmed Affected product V vim Published 11/16/2023 Severity Low CVE-2023-48235overflow in ex address parsing in vim Exploitation status Not known exploited Fix Not confirmed Affected product V vim Published 11/16/2023 Severity Low CVE-2023-48236overflow in get_number in vim Exploitation status Not known exploited Fix Not confirmed Affected product V vim Published 11/16/2023 Severity Low CVE-2023-48237overflow in shift_line in vim Exploitation status Not known exploited Fix Not confirmed Affected product V vim Published 11/16/2023 Severity Low CVE-2023-46246Integer Overflow in :history command in Vim Exploitation status Not known exploited Fix YesAffected product V vim Published 10/27/2023 Severity Medium CVE-2023-5535Use After Free in vim/vim Exploitation status Public exploit Fix YesAffected product V vim/vim Published 10/11/2023 Severity High CVE-2023-5441NULL Pointer Dereference in vim/vim Exploitation status Public exploit Fix YesAffected product V vim/vim Published 10/05/2023 Severity Medium CVE-2023-5344Heap-based Buffer Overflow in vim/vim Exploitation status Public exploit Fix YesAffected product V vim/vim Published 10/02/2023 Severity Medium CVE-2023-4781Heap-based Buffer Overflow in vim/vim Exploitation status Public exploit Fix YesAffected product V vim/vim Published 09/05/2023 Severity High CVE-2023-4733Use After Free in vim/vim Exploitation status Public exploit Fix YesAffected product V vim/vim Published 09/04/2023 Severity High CVE-2023-4750Use After Free in vim/vim Exploitation status Public exploit Fix YesAffected product V vim/vim Published 09/04/2023 Severity High CVE-2023-4752Use After Free in vim/vim Exploitation status Not confirmed Fix YesAffected product V vim/vim Published 09/04/2023 Severity High CVE-2023-4751Heap-based Buffer Overflow in vim/vim Exploitation status Public exploit Fix YesAffected product V vim/vim Published 09/03/2023 Severity High CVE-2023-4738Heap-based Buffer Overflow in vim/vim Exploitation status Public exploit Fix YesAffected product V vim/vim Published 09/02/2023 Severity High CVE-2023-4736Untrusted Search Path in vim/vim Exploitation status Public exploit Fix YesAffected product V vim/vim Published 09/02/2023 Severity High CVE-2023-4735Out-of-bounds Write in vim/vim Exploitation status Public exploit Fix YesAffected product V vim/vim Published 09/02/2023 Severity Medium CVE-2023-4734Integer Overflow or Wraparound in vim/vim Exploitation status Public exploit Fix YesAffected product V vim/vim Published 09/02/2023 Severity High CVE-2021-3236CVE-2021-3236 Exploitation status Public exploit Fix Not confirmed Affected product Not confirmed Published 08/11/2023 Severity Unknown CVE-2023-3896A divide by zero issue existed in vim of OpenCloudOS Stream Exploitation status Not known exploited Fix YesAffected product O OpenCloudOS Stream Published 08/07/2023 Severity High CVE-2020-20703CVE-2020-20703 Exploitation status Not known exploited Fix Not confirmed Affected product Not confirmed Published 06/20/2023 Severity Critical CVE-2023-2609NULL Pointer Dereference in vim/vim Exploitation status Public exploit Fix YesAffected product V vim/vim Published 05/09/2023 Severity High CVE-2023-2610Integer Overflow or Wraparound in vim/vim Exploitation status Public exploit Fix YesAffected product V vim/vim Published 05/09/2023 Severity High CVE-2023-2426Use of Out-of-range Pointer Offset in vim/vim Exploitation status Public exploit Fix YesAffected product V vim/vim Published 04/29/2023 Severity Medium CVE-2023-1355NULL Pointer Dereference in vim/vim Exploitation status Public exploit Fix YesAffected product V vim/vim Published 03/11/2023 Severity High CVE-2023-1264NULL Pointer Dereference in vim/vim Exploitation status Public exploit Fix YesAffected product V vim/vim Published 03/07/2023 Severity Medium CVE-2023-1175Incorrect Calculation of Buffer Size in vim/vim Exploitation status Public exploit Fix YesAffected product V vim/vim Published 03/04/2023 Severity High CVE-2023-1170Heap-based Buffer Overflow in vim/vim Exploitation status Public exploit Fix YesAffected product V vim/vim Published 03/03/2023 Severity High