Vim Vulnerabilities

Comprehensive security vulnerability database for Vim products

Last updated: Aug 17, 2022
Total CVEs

2

Critical

0

With Exploits

2

Last 30 Days

0

Severity Distribution

Critical0
0%
High1
50%
Medium1
50%
Low0
0%
DescriptionVendor / ProductExploit Status
CVE-2022-28457.8

This vulnerability allows an attacker to cause a crash or potentially execute harmful code in the Vim text editor by sending specially crafted input. It affects versions of Vim before 9.0.0218, so users running older versions are at risk if they process untrusted input.

vimvim
Exploit Available
over 3 years agoAug 17, 2022
CVE-2022-25985.5

This vulnerability allows an attacker to write data outside the intended memory space in the Vim text editor, which could potentially lead to crashes or execution of malicious code. It affects versions prior to 9.0.0100, so users running older versions are at risk if they open specially crafted files.

vimvim
Exploit Available
over 3 years agoAug 1, 2022

About Vim Security

This page tracks all publicly disclosed security vulnerabilities (CVEs) affecting Vim products. Our database is updated in real-time from the National Vulnerability Database (NVD) and enriched with exploit information from GitHub and other security research sources.

Each CVE listing includes CVSS severity scores, exploit availability status, AI-powered vulnerability summaries, and links to official patches and security advisories.