Skip to content
OpenAdvisories

Vendor

vim

231 known vulnerabilities.

Products

vim/vim 159 vim 72
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.5
    CVE-2026-73072 Public exploit

    Vim: Heap Buffer Overflow when Loading a Spell File

    Vim is an open source, command line text editor. Prior to 9.2.0846, set_sofo() in src/spellfile.c reuses sl_sal_first[] without resetting values left by set_sal_first(), so a crafted spell file containing an SN_SAL section before an SN_SOFO section causes und…

    vim vim vim vim Debian Ubuntu Alpine
  • Medium 4.6
    CVE-2026-44656 Public exploit

    Vim: OS Command Injection via 'path' completion

    Vim is an open source, command line text editor. Prior to version 9.2.0435, an OS command injection vulnerability exists in Vim's :find command-line completion. When the path option contains backtick-enclosed shell commands, those commands are executed during…

    vim vim vim vim Debian Ubuntu Alpine