vim

Top products

The 15 most recently published vulnerabilities affecting vim.

• CVE-2026-55693Vim: Out-of-bounds Write in Spell File Word Count7.8Jun 25, 2026
• CVE-2026-55892Vim: Out-of-bounds Write in Spell File Prefix Dump5.5Jun 25, 2026
• CVE-2026-55895Vim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filename7.8Jun 25, 2026
• CVE-2026-57451Vim: Out-of-bounds Read in Text Property Count5.3Jun 25, 2026
• CVE-2026-57452Vim: Out-of-bounds Read with libsodium-encrypted Files5.5Jun 25, 2026
• CVE-2026-57453Vim: PowerShell Command Injection via Unescaped Filename in zip.vim Extraction6.5Jun 25, 2026
• CVE-2026-57454Vim: Out-of-bounds Read with Text Properties6.1Jun 25, 2026
• CVE-2026-57455Vim: Stack out-of-bounds write in `spell_soundfold_sofo()` via an over-length `soundfold()` argument7.8Jun 25, 2026
• CVE-2026-57456Vim: Arbitrary Code Execution via Python Omni-Completion Docstrings7.8Jun 25, 2026
• CVE-2026-52860Vim: Arbitrary Code Execution via Python Omni-Completion7.8Jun 11, 2026
• CVE-2026-52859Vim: Out-of-bounds Read in Terminal Screen Snapshot8.2Jun 11, 2026
• CVE-2026-52858Vim: Arbitrary Code Execution via Python Omni-Completion7.8Jun 11, 2026
• CVE-2026-47162Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name8.8Jun 11, 2026
• CVE-2026-47167Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex5.3Jun 11, 2026
• CVE-2026-46483Vim: Command injection in tar#Vimuntar via missing shellescape {special} flag3.6May 15, 2026