vim

6 results · Clear filters · Feed

• High 8.5
  CVE-2026-73072 Public exploit

  Vim: Heap Buffer Overflow when Loading a Spell File

  Vim is an open source, command line text editor. Prior to 9.2.0846, set_sofo() in src/spellfile.c reuses sl_sal_first[] without resetting values left by set_sal_first(), so a crafted spell file containing an SN_SAL section before an SN_SOFO section causes und…

  vim vim vim vim Debian Ubuntu Alpine
  Aug 11, 2026
• Medium 4.6
  CVE-2026-44656 Public exploit

  Vim: OS Command Injection via 'path' completion

  Vim is an open source, command line text editor. Prior to version 9.2.0435, an OS command injection vulnerability exists in Vim's :find command-line completion. When the path option contains backtick-enclosed shell commands, those commands are executed during…

  vim vim vim vim Debian Ubuntu Alpine
  May 8, 2026
• Unscored —
  CVE-2019-12735 Public exploit EPSS 19%

  getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via t…

  vim vim vim neovim Debian Ubuntu Alpine
  Jun 5, 2019
• Unscored —
  CVE-2008-3076 Public exploit

  The Netrw plugin 125 in netrw.vim in Vim 7.2a.10 allows user-assisted attackers to execute arbitrary code via shell met…

  vim Debian
  Feb 21, 2009
• Unscored —
  CVE-2008-4101 Public exploit

  Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to (1) exe…

  vim Debian
  Sep 18, 2008
• Unscored —
  CVE-2008-2712 Public exploit EPSS 15%

  Vim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary commands via Vim script…

  vim Debian
  Jun 16, 2008