Vim CVEs and Security Vulnerabilities

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2021-3770

Heap-based Buffer Overflow in vim/vim

vim is vulnerable to Heap-based Buffer Overflow

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Fedoraproject Netapp Vim

Products

Fedora Ontap Select Deploy Administration Utility Vim

CVE-2021-3236

vim: NULL pointer dereference in ex_buffer_all method

vim 8.2.2348 is affected by null pointer dereference, allows local attackers to cause a denial of service (DoS) via the ex_buffer_all method.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Vim

Products

Vim

CVE-2019-20807

vim: users can execute arbitrary OS commands via scripting interfaces in the rvim restricted mode

In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces (e.g., Python, Ruby, or Lua).

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Apple Canonical Debian and 4 more

Products

Mac Os X Ubuntu Linux Debian Linux and 5 more

CVE-2019-20079

vim: Use after free in window.c

The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory.

CVSS 3.1 · 7.8 High EPSS 1.9% KEV · Not listed

Vendors

Canonical Vim

Products

Ubuntu Linux Vim

« first previous Page 14 of 14.