Known vulnerabilities in vim

Vendor: Fedoraproject
Software: vim
Software CPE: cpe:2.3:o:fedoraproject:vim:*:*:*:*:*:fedora:*:*
Website: https://getfedora.org/
Total vulnerabilities: 167
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting vim vim is affected by 167 known vulnerabilities: 88 high, 18 medium, 61 low Critical High Medium Low

Vulnerabilities (167)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU143641 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-34714		 CWE-78 Low
No
No
 9.2.272-1.fc43, 9.2.272-1.fc44, 9.2.280-1.fc42, 9.2.280-1.fc43 17.08.2026 SB2026081760
SB2026081761
SB2026081762
and 6 more
#VU131544 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-46483		 CWE-78 Low
No
No
 9.2.506-2.fc43, 9.2.530-1.fc43 15.05.2026 SB2026051517
SB2026052130
SB2026052523
and 20 more
#VU125101 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-39881		 CWE-78 Medium
No
No
 9.2.390-1.fc42, 9.2.390-1.fc43, 9.2.390-1.fc44 08.04.2026 SB2026040828
SB2026041567
SB2026042494
and 9 more
#VU124153 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-33412		 CWE-78 Medium
No
No
 9.2.240-1.fc43, 9.2.240-1.fc44 20.03.2026 SB2026032022
SB20260325108
SB20260325109
and 23 more
#VU123428 - Stack-based buffer overflow
CVE-2026-28422		 CWE-121 High
No
No
 9.2.112-1.fc43, 9.2.112-1.fc44, 9.2.112-2.fc42, 9.2.112-2.fc43, 9.2.112-2.fc44, 9.2.148-1.fc42, 9.2.148-1.fc44 03.03.2026 SB2026030330
SB2026030546
SB2026030620
and 9 more
#VU123427 - Heap-based Buffer Overflow
CVE-2026-28421		 CWE-122 High
No
No
 9.2.112-1.fc43, 9.2.112-1.fc44, 9.2.112-2.fc42, 9.2.112-2.fc43, 9.2.112-2.fc44, 9.2.148-1.fc42, 9.2.148-1.fc44 03.03.2026 SB2026030329
SB2026030546
SB2026030620
and 25 more
#VU123426 - Heap-based Buffer Overflow
CVE-2026-28420		 CWE-122 Medium
No
No
 9.2.112-1.fc43, 9.2.112-1.fc44, 9.2.112-2.fc42, 9.2.112-2.fc43, 9.2.112-2.fc44, 9.2.148-1.fc42, 9.2.148-1.fc44 03.03.2026 SB2026030326
SB2026030546
SB2026030620
and 9 more
#VU123425 - Heap-based Buffer Overflow
CVE-2026-28419		 CWE-122 High
No
No
 9.2.112-1.fc43, 9.2.112-1.fc44, 9.2.112-2.fc42, 9.2.112-2.fc43, 9.2.112-2.fc44, 9.2.148-1.fc42, 9.2.148-1.fc44 03.03.2026 SB2026030322
SB2026030546
SB2026030620
and 9 more
#VU123424 - Heap-based Buffer Overflow
CVE-2026-28418		 CWE-122 High
No
No
 9.2.112-1.fc43, 9.2.112-1.fc44, 9.2.112-2.fc42, 9.2.112-2.fc43, 9.2.112-2.fc44, 9.2.148-1.fc42, 9.2.148-1.fc44 03.03.2026 SB2026030318
SB2026030546
SB2026030620
and 9 more
#VU123423 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-28417		 CWE-78 High
No
No
 9.2.112-1.fc43, 9.2.112-1.fc44, 9.2.112-2.fc42, 9.2.112-2.fc43, 9.2.112-2.fc44, 9.2.148-1.fc42, 9.2.148-1.fc44 03.03.2026 SB2026030317
SB2026030620
SB2026030621
and 28 more
#VU122841 - Stack-based buffer overflow
CVE-2026-26269		 CWE-121 Medium
No
No
 9.2.045-1.fc42, 9.2.045-1.fc43 16.02.2026 SB2026021613
SB2026022443
SB2026022444
and 11 more
#VU122421 - Heap-based Buffer Overflow
CVE-2026-25749		 CWE-122 High
No
No
 9.1.2146-1.fc42, 9.1.2146-1.fc43 05.02.2026 SB2026020601
SB2026021309
SB2026021310
and 19 more
#VU112980 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-53905		 CWE-22 High
No
No
 9.1.1552-1.fc41, 9.1.1552-1.fc42 16.07.2025 SB2025071691
SB2025071770
SB2025071771
and 23 more
#VU112979 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-53906		 CWE-22 High
No
No
 9.1.1552-1.fc41, 9.1.1552-1.fc42 16.07.2025 SB2025071690
SB2025071770
SB2025071771
and 29 more
#VU105685 - Argument Injection or Modification
CVE-2025-29768		 CWE-88 Medium
No
No
 9.1.1202-1.fc40, 9.1.1202-1.fc41 13.03.2025 SB2025031307
SB2025031436
SB2025031437
and 2 more
#VU105169 - Improper input validation
CVE-2025-27423		 CWE-20 High
No
No
 9.1.1169-1.fc40, 9.1.1169-1.fc41, 9.1.1169-1.fc42 02.03.2025 SB2025030201
SB2025030517
SB2025030518
and 1 more
#VU103998 - Use After Free
CVE-2025-26603		 CWE-416 High
No
No
 9.1.1122-1.fc40, 9.1.1122-1.fc41, 9.1.1122-1.fc42, 9.1.1169-1.fc42 17.02.2025 SB2025021706
SB2025022026
SB2025022027
and 5 more
#VU96656 - Heap-based Buffer Overflow
CVE-2024-45306		 CWE-122 Low
No
No
 9.1.719-1.fc39, 9.1.719-1.fc40, 9.1.719-1.fc41 02.09.2024 SB2024090205
SB2024090801
SB2024090802
and 14 more
#VU96494 - Heap-based Buffer Overflow
CVE-2024-43802		 CWE-122 Low
No
No
 9.1.703-1.fc39, 9.1.703-1.fc40, 9.1.703-1.fc41, 9.1.719-1.fc39 26.08.2024 SB2024082602
SB2024083027
SB2024083028
and 13 more
#VU96061 - Use After Free
CVE-2024-43374		 CWE-416 High
No
No
 9.1.703-1.fc39, 9.1.703-1.fc40, 9.1.703-1.fc41, 9.1.719-1.fc39 15.08.2024 SB2024081581
SB2024082362
SB2024083027
and 10 more


Showing elements 1 - 20 out of 167