vim vulnerabilities

CVEs per yearBy the year they were published

1. 202120
2. 2022113
3. 202335
4. 20247
5. 202510
6. 202646

Newest CVEs

• CVE-2026-43961

  Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution

  vim · vim

  High7.8
• CVE-2026-73073

  Vim: Arbitrary Ex Command Execution in C Omni-Completion

  vim · vim

  High7.1
• CVE-2026-73078

  Vim: Arbitrary Code Execution via Netrw Menu Construction

  vim · vim

  High8.6
• CVE-2026-73077

  Vim: Arbitrary Code Execution via Shell Keyword Lookup

  vim · vim

  High8.4
• CVE-2026-73076

  Vim: Arbitrary Command Execution via Malicious `.VimballRecord` Entry Replay in `vimball.vim`

  vim · vim

  High8.4
• CVE-2026-73075

  Vim: Out-of-bounds Access in Popup Opacity Handling

  vim · vim

  Medium4.6
• CVE-2026-73074

  Vim: Heap Buffer Overflow in Text Property Handling

  vim · vim

  High7.1
• CVE-2026-73072

  Vim: Heap Buffer Overflow when Loading a Spell File

  vim · vim

  High8.5
• CVE-2026-73071

  Vim: Use-after-free in JSON Decoding

  vim · vim

  Low3.3
• CVE-2026-73070

  Vim: Stack Buffer Overflow in the Vim Socket Server

  vim · vim

  Medium6.8