Vim · weakness class
Memory Corruption
209 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
- likely to be exploited
- 2
Every one of the 209 is a mark on the map. Named now: 1 to 26, most at risk first.
- Heap-based Buffer Overflow in vim/vim
- Heap-based Buffer Overflow in vim/vim
- Heap-based buffer overflow in the mch_expand_wildcards function in os_unix.c in Vim 6.2 and 6.3 allows user-assisted attackers to execute arbitrary code via shell metacharacters i…
- An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a…
- global heap buffer overflow in skip_range in vim/vim
- vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result in an integer overflow at a memory allocation site and a r…
- Use after free in append_command in vim/vim
- An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length when reading a corru…
- Heap-based Buffer Overflow in function cmdline_erase_chars in vim/vim
- Heap buffer overflow in vim_strncpy find_word in vim/vim
- Heap-based Buffer Overflow in vim/vim
- Buffer Over-read in function grab_file_name in vim/vim
- Heap-based Buffer Overflow in vim/vim
- Heap-based Buffer Overflow in vim/vim
- Heap-based Buffer Overflow in vim/vim
- Buffer Over-read in function find_next_quote in vim/vim
- The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory.
- Out-of-bounds Read in vim/vim
- Stack-based Buffer Overflow in vim/vim
- Out-of-bounds Read in vim/vim
- Use After Free in vim/vim
- Use After Free in vim/vim
- Heap-based Buffer Overflow in vim/vim
- Heap-based Buffer Overflow in vim/vim
- Heap-based Buffer Overflow in vim/vim
- Use After Free in vim/vim
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.