Known vulnerabilities in Vim

Vendor: Vim.org
Software: Vim
Software CPE: cpe:2.3:a:vim_org:vim:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 252
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Vim Vim is affected by 252 known vulnerabilities: 115 high, 51 medium, 86 low Critical High Medium Low

Vulnerabilities (252)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU145884 - Incorrect Calculation of Buffer Size
CWE-131 Medium
No
No
9.2.1014 27.08.2026 SB2026082721
#VU145882 - Out-of-bounds write
CWE-787 Medium
No
No
9.2.1013 27.08.2026 SB2026082720
#VU145378 - Argument Injection or Modification
CWE-88 Low
No
No
9.2.1011 26.08.2026 SB2026082614
#VU143641 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-34714
CWE-78 Low
No
No
9.2.0272 17.08.2026 SB2026081760
SB2026081761
SB2026081762
and 6 more
#VU139392 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-73076
CWE-94 High
No
No
9.2.0847 27.07.2026 SB2026072714
SB2026082207
SB2026082208
and 1 more
#VU139391 - Heap-based Buffer Overflow
CVE-2026-73072
CWE-122 Medium
No
No
9.2.0846 27.07.2026 SB2026072713
SB2026082207
SB2026082208
and 1 more
#VU139390 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-73073
CWE-94 High
No
No
9.2.0845 27.07.2026 SB2026072712
SB2026082677
#VU139389 - Use After Free
CVE-2026-73071
CWE-416 Low
No
No
9.2.0844 27.07.2026 SB2026072711
SB2026082207
SB2026082208
and 2 more
#VU139262 - Command injection
CVE-2026-73078
CWE-77 High
No
No
9.2.0840 24.07.2026 SB2026072423
SB2026082207
SB2026082208
and 2 more
#VU139260 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-73077
CWE-78 Medium
No
No
9.2.0839 24.07.2026 SB2026072422
SB2026082207
SB2026082208
and 2 more
#VU139259 - Heap-based Buffer Overflow
CVE-2026-73074
CWE-122 Low
No
No
9.2.0841 24.07.2026 SB2026072421
SB2026082207
SB2026082208
and 2 more
#VU139258 - Stack-based buffer overflow
CVE-2026-73070
CWE-121 Low
No
No
9.2.0842 24.07.2026 SB2026072420
SB2026082207
SB2026082208
and 1 more
#VU139257 - Buffer Underwrite ('Buffer Underflow')
CVE-2026-73075
CWE-124 Low
No
No
9.2.0843 24.07.2026 SB2026072419
SB2026082207
SB2026082208
and 1 more
#VU135702 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-59856
CWE-94 High
No
No
9.2.0736 29.06.2026 SB2026062909
SB20260715103
SB2026072430
and 4 more
#VU135701 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-59858
CWE-94 Medium
No
No
9.2.0735 29.06.2026 SB2026062908
SB20260715103
SB2026072526
and 5 more
#VU135167 - Out-of-bounds write
CVE-2026-59857
CWE-787 Low
No
No
9.2.0725 25.06.2026 SB2026062530
SB20260715103
SB2026072526
and 3 more
#VU134978 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-57456
CWE-94 High
No
No
9.2.0699 22.06.2026 SB2026062216
SB2026070315
SB2026071933
and 3 more
#VU134977 - Out-of-bounds write
CVE-2026-57455
CWE-787 Low
No
No
9.2.0698 22.06.2026 SB2026062215
SB2026070315
SB2026071933
and 3 more
#VU134976 - Out-of-bounds read
CVE-2026-57454
CWE-125 Medium
No
No
9.2.0679 22.06.2026 SB2026062214
#VU134975 - Command injection
CVE-2026-57453
CWE-77 Medium
No
No
9.2.0678 22.06.2026 SB2026062213
SB2026070315


Showing elements 1 - 20 out of 252