Skip to content

Vim · product

vim/vim

159 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

likely to be exploited
2

Every one of the 159 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Heap-based Buffer Overflow in vim/vimCVE-2022-0572vim · CVSS 8.4 · 26% likely

    CWE-122

  2. Heap-based Buffer Overflow in vim/vimCVE-2022-0714vim · CVSS 8.4 · 13% likely

    CWE-122

  3. global heap buffer overflow in skip_range in vim/vimCVE-2022-1381vim · CVSS 7.8 · 3.1% likely

    CWE-122

  4. Use after free in append_command in vim/vimCVE-2022-1616vim · CVSS 7.3 · 2.7% likely

    CWE-416

  5. Heap-based Buffer Overflow in function cmdline_erase_chars in vim/vimCVE-2022-1619vim · CVSS 6.1 · 2.6% likely

    CWE-122

  6. Heap buffer overflow in vim_strncpy find_word in vim/vimCVE-2022-1621vim · CVSS 7.3 · 2.4% likely

    CWE-122

  7. Heap-based Buffer Overflow in vim/vimCVE-2021-3968vim · CVSS 8 · 2.3% likely

    CWE-122

  8. Buffer Over-read in function grab_file_name in vim/vimCVE-2022-1720vim · CVSS 6.6 · 2.2% likely

    CWE-126

  9. Heap-based Buffer Overflow in vim/vimCVE-2022-0318vim · CVSS 6.6 · 2.0% likely

    CWE-122

  10. Heap-based Buffer Overflow in vim/vimCVE-2021-4136vim · CVSS 7.3 · 2.0% likely

    CWE-122

  11. Heap-based Buffer Overflow in vim/vimCVE-2021-4019vim · CVSS 7.1 · 1.9% likely

    CWE-122

  12. Buffer Over-read in function find_next_quote in vim/vimCVE-2022-1629vim · CVSS 6.6 · 1.9% likely

    CWE-126

  13. Out-of-bounds Read in vim/vimCVE-2021-4193vim · CVSS 5.5 · 1.9% likely

    CWE-125

  14. Stack-based Buffer Overflow in vim/vimCVE-2022-0629vim · CVSS 8.4 · 1.9% likely

    CWE-121

  15. Out-of-bounds Read in vim/vimCVE-2022-0128vim · CVSS 7.1 · 1.9% likely

    CWE-125

  16. Use After Free in vim/vimCVE-2021-4192vim · CVSS 5.5 · 1.8% likely

    CWE-416

  17. Use After Free in vim/vimCVE-2022-0156vim · CVSS 6.8 · 1.8% likely

    CWE-416

  18. Heap-based Buffer Overflow in vim/vimCVE-2022-0158vim · CVSS 6.8 · 1.8% likely

    CWE-122

  19. Heap-based Buffer Overflow in vim/vimCVE-2022-0261vim · 1.8% likely

    CWE-122

  20. Heap-based Buffer Overflow in vim/vimCVE-2021-3973vim · CVSS 7.3 · 1.8% likely

    CWE-122

  21. Use After Free in vim/vimCVE-2021-4187vim · CVSS 6.8 · 1.8% likely

    CWE-416

  22. Use After Free in vim/vimCVE-2021-4173vim · CVSS 6.8 · 1.8% likely

    CWE-416

  23. Use After Free in vim/vimCVE-2021-3796vim · CVSS 8.2 · 1.7% likely

    CWE-416

  24. Heap-based Buffer Overflow in vim/vimCVE-2021-3778vim · CVSS 7.8 · 1.7% likely

    CWE-122

  25. Use of Out-of-range Pointer Offset in vim/vimCVE-2022-0685vim · CVSS 8.4 · 1.7% likely

    CWE-823

  26. Heap-based Buffer Overflow in vim/vimCVE-2021-3927vim · CVSS 7.3 · 1.7% likely

    CWE-122

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP

Updated AboutDevelopersSign in