vim
Number 76 by total vulnerabilities in the catalog.
Computed from the whole catalog when the site is built.
Combines these spellings from source records: Vim, vim
Total vulnerabilities
231
Critical
1
High
135
Known Exploited
0
Exploit available
0
Network, no login needed
3.9%
Of 230 scored records
- Critical
- High
- Medium
- Low
- None or not scored
Show as table
| Period | Total | Critical | High | Medium | Low | None or not scored |
|---|---|---|---|---|---|---|
| 2026 (incomplete) | 46 | 1 | 14 | 28 | 3 | 0 |
| 2025 | 10 | 0 | 2 | 8 | 0 | 0 |
| 2024 | 7 | 0 | 0 | 6 | 1 | 0 |
| 2023 | 35 | 0 | 21 | 6 | 8 | 0 |
| 2022 | 113 | 0 | 82 | 30 | 0 | 1 |
| 2021 | 20 | 0 | 16 | 4 | 0 | 0 |
Top products
| Product | Total | Critical/High |
|---|---|---|
| vim/vim | 159 | 119 |
| vim | 71 | 16 |
| Vim | 1 | 1 |
Top bug types
| Bug type | Total | Critical/High |
|---|---|---|
| Memory Corruption | 173 | 103 |
| Command Injection | 12 | 5 |
| Code Injection | 11 | 9 |
| Stack-based Buffer Overflow | 8 | 5 |
| Buffer Over-read | 6 | 3 |
| Use of Out-of-range Pointer Offset | 5 | 3 |
| Path Traversal | 3 | 0 |
| Divide By Zero | 2 | 2 |
| Access of Memory Location Before Start of Buffer | 1 | 1 |
| Floating Point Comparison with Incorrect Operator | 1 | 0 |
Newest vulnerabilities
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-43961 | Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution | High | 0.2% | |
| CVE-2026-73073 | Vim: Arbitrary Ex Command Execution in C Omni-Completion | High | 0.2% | |
| CVE-2026-73078 | Vim: Arbitrary Code Execution via Netrw Menu Construction | High | 0.3% | |
| CVE-2026-73077 | Vim: Arbitrary Code Execution via Shell Keyword Lookup | High | 0.1% | |
| CVE-2026-73076 | Vim: Arbitrary Command Execution via Malicious `.VimballRecord` Entry Replay in `vimball.vim` | High | 0.1% | |
| CVE-2026-73075 | Vim: Out-of-bounds Access in Popup Opacity Handling | Medium | 0.1% | |
| CVE-2026-73074 | Vim: Heap Buffer Overflow in Text Property Handling | High | 0.1% | |
| CVE-2026-73072 | Vim: Heap Buffer Overflow when Loading a Spell File | High | 0.1% | |
| CVE-2026-73071 | Vim: Use-after-free in JSON Decoding | Low | 0.1% | |
| CVE-2026-73070 | Vim: Stack Buffer Overflow in the Vim Socket Server | Medium | 0.2% |