vim/vim vulnerabilities

Latest vim/vim CVEs

Newest publication first

1. CVE-2023-5535 Use After Free in vim/vim

   Published 2023-10-11

   High·CVSS 7.8

   Use After Free in GitHub repository vim/vim prior to v9.0.2010.

2. CVE-2023-5441 NULL Pointer Dereference in vim/vim

   Published 2023-10-05

   Medium·CVSS 6.2

   NULL Pointer Dereference in GitHub repository vim/vim prior to 20d161ace307e28690229b68584f2d84556f8960.

3. CVE-2023-5344 Heap-based Buffer Overflow in vim/vim

   Published 2023-10-02

   Medium·CVSS 4.0

   Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969.

4. CVE-2023-4781 Heap-based Buffer Overflow in vim/vim

   Published 2023-09-05

   High·CVSS 7.8

   Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873.

5. CVE-2023-4733 Use After Free in vim/vim

   Published 2023-09-04

   High·CVSS 7.3

   Use After Free in GitHub repository vim/vim prior to 9.0.1840.

6. CVE-2023-4750 Use After Free in vim/vim

   Published 2023-09-04

   High·CVSS 7.8

   Use After Free in GitHub repository vim/vim prior to 9.0.1857.

7. CVE-2023-4752 Use After Free in vim/vim

   Published 2023-09-04

   High·CVSS 7.8

   Use After Free in GitHub repository vim/vim prior to 9.0.1858.

8. CVE-2023-4751 Heap-based Buffer Overflow in vim/vim

   Published 2023-09-03

   High·CVSS 7.8

   Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331.

9. CVE-2023-4738 Heap-based Buffer Overflow in vim/vim

   Published 2023-09-02

   High·CVSS 7.8

   Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848.

10. CVE-2023-4736 Untrusted Search Path in vim/vim

    Published 2023-09-02

    High·CVSS 7.8

    Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833.

11. CVE-2023-4735 Out-of-bounds Write in vim/vim

    Published 2023-09-02

    Medium·CVSS 4.8

    Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847.

12. CVE-2023-4734 Integer Overflow or Wraparound in vim/vim

    Published 2023-09-02

    High·CVSS 7.8

    Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846.

13. CVE-2023-2610 Integer Overflow or Wraparound in vim/vim

    Published 2023-05-09

    High·CVSS 7.8

    Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1532.

14. CVE-2023-2609 NULL Pointer Dereference in vim/vim

    Published 2023-05-09

    High·CVSS 7.8

    NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1531.

15. CVE-2023-2426 Use of Out-of-range Pointer Offset in vim/vim

    Published 2023-04-29

    Medium·CVSS 6.8

    Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.