Overview 188 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 8 public PoC · 0 EPSS ≥ 0.5
188matches
0in Waratek scope0.0%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
8public PoC4.3%
0EPSS ≥ 0.50.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
1
0.5%
Not applicable
187
99.5%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
188
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
8
4.3%
Proof of concept only
29
15.4%
Forecast only
0
0.0%
No public exploit
151
80.3%
split by
peak 94 / year
20052
Not applicable2
High2
not blocked2
No public exploit2
20060
20072
Not applicable2
High2
not blocked2
Working exploit published1
No public exploit1
20084
Not applicable4
High4
not blocked4
Working exploit published4
20094
Not applicable4
High4
not blocked4
Working exploit published1
No public exploit3
20101
Not applicable1
High1
not blocked1
No public exploit1
20110
20120
20130
20142
Not applicable2
High2
not blocked2
No public exploit2
20150
20163
Not applicable3
High3
not blocked3
No public exploit3
20172
Not applicable2
High2
not blocked2
Working exploit published1
No public exploit1
20180
20192
Not applicable2
High2
not blocked2
Working exploit published1
No public exploit1
20201
Not applicable1
High1
not blocked1
No public exploit1
202119
Not applicable19
High19
not blocked19
No public exploit19
202294
Outside Waratek scope1
Not applicable93
High94
not blocked94
Proof of concept only9
No public exploit85
202324
Not applicable24
High24
not blocked24
Proof of concept only19
No public exploit5
20243
Not applicable3
High3
not blocked3
Proof of concept only1
No public exploit2
20252
Not applicable2
High2
not blocked2
No public exploit2
202623
Not applicable23
High23
not blocked23
No public exploit23
20062008201020122014201620182020202220242026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-73073 | High | 2026-08-18 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers() in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an unterminated collection followed by a command separator to execute arbitrary Ex and operating-system commands when a user invokes C omni-completion with CTRL-X CTRL-O on a member access whose type is resolved from that tags file. This issue is fixed in version 9.2.0845. |
| CVE-2026-73078 | High | 2026-08-11 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to 9.2.0840, runtime/plugin/netrwPlugin.vim loads netrw and runtime/pack/dist/opt/netrw/autoload/netrw.vim constructs Bookmarks, History, and Targets menu entries by interpolating attacker-controlled directory paths into executed :menu commands. s:NetrwBookmarkMenu(), s:NetrwTgtMenu(), g:netrw_menu_escape, EX_TRLBAR, and netrw#MakeTgt() fail to neutralize the | command separator or single quotes at five construction sites, allowing a crafted path browsed or bookmarked in GUI Vim to execute arbitrary Ex and operating-system commands. This issue is fixed in version 9.2.0840. |
| CVE-2026-73077 | High | 2026-08-11 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual-mode selections from K through keywordprg commands without safely separating shell arguments. fnameescape() and PATH_ESC_CHARS do not neutralize shell metacharacters before ShKeywordPrg, ZshKeywordPrg, or GetHelp invokes bash, zsh, or PowerShell, allowing arbitrary operating-system commands to execute with the privileges of the user running Vim. This issue is fixed in version 9.2.0839. |
| CVE-2026-73076 | High | 2026-08-11 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named .VimballRecord to overwrite the installation record with attacker-chosen commands. When vimball#RmVimball() later processes the matching record entry, the stored Ex commands, including operating-system commands invoked through :!, execute with the privileges of the user running Vim. This issue is fixed in version 9.2.0847. |
| CVE-2026-73074 | High | 2026-08-11 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to 9.2.0841, prop_add_one() in src/textprop.c uses the proplen value from get_text_props() to increment a uint16_t property count beyond 0xffff, wrapping the count to zero and copying existing text-property records into a heap allocation sized for none of them. This issue is fixed in version 9.2.0841. |
| CVE-2026-73072 | High | 2026-08-11 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to 9.2.0846, set_sofo() in src/spellfile.c reuses sl_sal_first[] without resetting values left by set_sal_first(), so a crafted spell file containing an SN_SAL section before an SN_SOFO section causes under-counted mapping lists and attacker-influenced writes beyond a heap allocation. This issue is fixed in version 9.2.0846. |
| CVE-2026-51401 | High | 2026-08-04 | Not applicable | No public exploit | An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vms_fixfilename() function within file vim/src/os_vms.c |
| CVE-2026-51400 | High | 2026-08-04 | Not applicable | No public exploit | An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vms_fixfilename() function within file vim/src/os_vms.c |
| CVE-2026-59858 | High | 2026-07-09 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim interpolates the typeref: or typename: extension field of a tags entry, without escaping, into a :vimgrep pattern that is run through :execute. Because :vimgrep honors the bar as a command separator, a crafted tag field can close the search pattern and append an arbitrary Ex command; opening a hostile .c file whose project tags file contains such an entry and invoking C omni-completion runs that command as the editing user. This issue is fixed in version 9.2.0735. |
| CVE-2026-59856 | High | 2026-07-09 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to 9.2.0736, the PHP omni-completion script in runtime/autoload/phpcomplete.vim interpolates a class or trait name, taken from the contents of the edited buffer, into a search() pattern that is run via win_execute() without escaping. A name containing a single quote can terminate the search() string argument early, and because the bar is honored as an Ex command separator, the remainder of the name is run as Ex commands; via the :! command this allows arbitrary operating-system command execution when a victim opens a crafted PHP file and invokes omni-completion. This issue is fixed in version 9.2.0736. |
| CVE-2026-57456 | High | 2026-06-25 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to 9.2.0699, Vim's Python omni-completion (runtime/autoload/python3complete.vim and the legacy pythoncomplete.vim) executes reconstructed function and class definitions from the current buffer with exec() as part of populating the completion dictionary. When reconstructing that source, each scope's docstring is inserted verbatim between triple quotes with no escaping, so a hostile buffer can break out of the triple-quoted literal and execute attacker-controlled Python during omni-completion. This vulnerability is fixed in 9.2.0699. |
| CVE-2026-57453 | High | 2026-06-25 | Not applicable | No public exploit | Vim is an open source, command line text editor. From 9.1.1784 until 9.2.0678, when the bundled zip plugin autoload/zip.vim falls back to PowerShell to browse, read, extract, update or delete entries in a zip archive, it builds the PowerShell command by inserting archive entry names that are quoted only for the shell, not for PowerShell. A crafted entry name can break out of the intended string context and cause PowerShell to execute arbitrary commands with the privileges of the user running Vim, triggered by opening, viewing or extracting the archive. This vulnerability is fixed in 9.2.0678. |
| CVE-2026-52860 | High | 2026-06-11 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to version 9.2.0597, Vim's Python omni-completion executes reconstructed function and class definitions from the current buffer with exec() as part of populating the completion dictionary. Python evaluates function default values, parameter annotations, and class base expressions at definition time, so a hostile buffer can execute attacker-controlled Python expressions during omni-completion. The existing g:pythoncomplete_allow_import mitigation (GHSA-52mc-rq6p-rc7c) does not cover this path, because the attacker-controlled code is not a harvested import/from statement. This issue has been patched in version 9.2.0597. |
| CVE-2026-52858 | High | 2026-06-11 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to version 9.2.0561, the Python omni-completion script in python3complete.vim for Vim with the +python3 interpreter enabled (and the legacy pythoncomplete.vim for builds with the +python interpreter) executes the import and from statements found in the current buffer through Python's import machinery. Because the buffer's working directory is on sys.path, opening a hostile .py file with a sibling Python package and invoking omni-completion runs that package's top-level code as the editing user. This issue has been patched in version 9.2.0561. |
| CVE-2026-47162 | High | 2026-06-11 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave() in the netrw plugin (runtime/pack/dist/opt/netrw/autoload/netrw.vim) when serializing browsed directory paths to the history file ~/.vim/.netrwhist. A directory name derived from the filesystem is interpolated into a single-quoted Vimscript string literal without escaping embedded single quotes, allowing a crafted directory name to break out of the string context and execute arbitrary Vimscript, including shell commands via system() and :!, the next time the history file is sourced. This issue has been patched in version 9.2.0495. |
| CVE-2026-46483 | High | 2026-05-15 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tar#Vimuntar() in runtime/autoload/tar.vim when decompressing .tgz archives on Unix-like systems. The function builds :!gunzip and :!gzip -d commands using shellescape(tartail) without the {special} flag, allowing a crafted archive filename to trigger Vim cmdline-special expansion and execute shell commands in the user's context. This vulnerability is fixed in 9.2.0479. |
| CVE-2026-39881 | High | 2026-04-08 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to 9.2.0316, a command injection vulnerability in Vim's netbeans interface allows a malicious netbeans server to execute arbitrary Ex commands when Vim connects to it, via unsanitized strings in the defineAnnoType and specialKeys protocol messages. This vulnerability is fixed in 9.2.0316. |
| CVE-2026-35177 | High | 2026-04-06 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to 9.2.0280, a path traversal bypass in Vim's zip.vim plugin allows overwriting of arbitrary files when opening specially crafted zip archives, circumventing the previous fix for CVE-2025-53906. This vulnerability is fixed in 9.2.0280. |
| CVE-2026-34982 | High | 2026-04-06 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command execution when a user opens a crafted file. The `complete`, `guitabtooltip` and `printheader` options are missing the `P_MLE` flag, allowing a modeline to be executed. Additionally, the `mapset()` function lacks a `check_secure()` call, allowing it to be abused from sandboxed expressions. Commit 9.2.0276 fixes the issue. |
| CVE-2026-33412 | High | 2026-03-24 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob() function on Unix-like systems. By including a newline character (\n) in a pattern passed to glob(), an attacker may be able to execute arbitrary shell commands. This vulnerability depends on the user's 'shell' setting. This issue has been patched in version 9.2.0202. |
| CVE-2026-28421 | High | 2026-02-27 | Not applicable | No public exploit | Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault (SEGV) exist in Vim's swap file recovery logic. Both are caused by unvalidated fields read from crafted pointer blocks within a swap file. Version 9.2.0077 fixes the issue. |
| CVE-2026-28417 | High | 2026-02-27 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the `netrw` standard plugin bundled with Vim. By inducing a user to open a crafted URL (e.g., using the `scp://` protocol handler), an attacker can execute arbitrary shell commands with the privileges of the Vim process. Version 9.2.0073 fixes the issue. |
| CVE-2026-26269 | High | 2026-02-13 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to 9.1.2148, a stack buffer overflow vulnerability exists in Vim's NetBeans integration when processing the specialKeys command, affecting Vim builds that enable and use the NetBeans feature. The Stack buffer overflow exists in special_keys() (in src/netbeans.c). The while (*tok) loop writes two bytes per iteration into a 64-byte stack buffer (keybuf) with no bounds check. A malicious NetBeans server can overflow keybuf with a single specialKeys command. The issue has been fixed as of Vim patch v9.1.2148. |
| CVE-2025-66476 | High | 2025-12-02 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to version 9.1.1947, an uncontrolled search path vulnerability on Windows allows Vim to execute malicious executables placed in the current working directory for the current edited file. On Windows, when using cmd.exe as a shell, Vim resolves external commands by searching the current working directory before system paths. When Vim invokes tools such as findstr for :grep, external commands or filters via :!, or compiler/:make commands, it may inadvertently run a malicious executable present in the same directory as the file being edited. The issue affects Vim for Windows prior to version 9.1.1947. |
| CVE-2025-27423 | High | 2025-03-03 | Not applicable | No public exploit | Vim is an open source, command line text editor. Vim is distributed with the tar.vim plugin, that allows easy editing and viewing of (compressed or uncompressed) tar files. Starting with 9.1.0858, the tar.vim plugin uses the ":read" ex command line to append below the cursor position, however the is not sanitized and is taken literally from the tar archive. This allows to execute shell commands via special crafted tar archives. Whether this really happens, depends on the shell being used ('shell' option, which is set using $SHELL). The issue has been fixed as of Vim patch v9.1.1164 |
| CVE-2024-35770 | High | 2024-06-21 | Not applicable | No public exploit | Cross-Site Request Forgery (CSRF) vulnerability in Dave Kiss Vimeography: Vimeo Video Gallery WordPress Plugin.This issue affects Vimeography: Vimeo Video Gallery WordPress Plugin: from n/a through 2.4.1. |
| CVE-2024-0825 | High | 2024-03-05 | Not applicable | No public exploit | The Vimeography: Vimeo Video Gallery WordPress Plugin plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.3.2 via deserialization of untrusted input via the vimeography_duplicate_gallery_serialized in the duplicate_gallery function. This makes it possible for authenticated attackers attackers, with contributor access or higher, to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. |
| CVE-2024-22667 | High | 2024-02-05 | Not applicable | Proof of concept only | Vim before 9.0.2142 has a stack-based buffer overflow because did_set_langmap in map.c calls sprintf to write to the error buffer that is passed down to the option callback functions. |
| CVE-2023-41036 | High | 2023-11-07 | Not applicable | Proof of concept only | Macvim is a text editor for MacOS. Prior to version 178, Macvim makes use of an insecure interprocess communication (IPC) mechanism which could lead to a privilege escalation. Distributed objects are a concept introduced by Apple which allow one program to vend an interface to another program. What is not made clear in the documentation is that this service can vend this interface to any other program on the machine. The impact of exploitation is a privilege escalation to root - this is likely to affect anyone who is not careful about the software they download and use MacVim to edit files that would require root privileges. Version 178 contains a fix for this issue. |
| CVE-2023-5535 | High | 2023-10-11 | Not applicable | Proof of concept only | Use After Free in GitHub repository vim/vim prior to v9.0.2010. |
| CVE-2023-5344 | High | 2023-10-02 | Not applicable | Proof of concept only | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969. |
| CVE-2023-2848 | High | 2023-09-14 | Not applicable | No public exploit | Movim prior to version 0.22 is affected by a Cross-Site WebSocket Hijacking vulnerability. This was the result of a missing header validation. |
| CVE-2023-4781 | High | 2023-09-05 | Not applicable | Proof of concept only | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873. |
| CVE-2023-4752 | High | 2023-09-04 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 9.0.1858. |
| CVE-2023-4750 | High | 2023-09-04 | Not applicable | Proof of concept only | Use After Free in GitHub repository vim/vim prior to 9.0.1857. |
| CVE-2023-4733 | High | 2023-09-04 | Not applicable | Proof of concept only | Use After Free in GitHub repository vim/vim prior to 9.0.1840. |
| CVE-2023-4751 | High | 2023-09-03 | Not applicable | Proof of concept only | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331. |
| CVE-2023-4738 | High | 2023-09-02 | Not applicable | Proof of concept only | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848. |
| CVE-2023-4736 | High | 2023-09-02 | Not applicable | Proof of concept only | Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833. |
| CVE-2023-4735 | High | 2023-09-02 | Not applicable | Proof of concept only | Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847. |
| CVE-2023-4734 | High | 2023-09-02 | Not applicable | Proof of concept only | Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846. |
| CVE-2023-30498 | High | 2023-08-15 | Not applicable | No public exploit | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in CodeFlavors Vimeotheque: Vimeo WordPress Plugin <= 2.2.1 versions. |
| CVE-2023-3896 | High | 2023-08-07 | Not applicable | No public exploit | Divide By Zero in vim/vim from 9.0.1367-1 to 9.0.1367-3 |
| CVE-2023-2610 | High | 2023-05-09 | Not applicable | Proof of concept only | Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1532. |
| CVE-2023-1127 | High | 2023-03-01 | Not applicable | Proof of concept only | Divide By Zero in GitHub repository vim/vim prior to 9.0.1367. |
| CVE-2023-0512 | High | 2023-01-30 | Not applicable | Proof of concept only | Divide By Zero in GitHub repository vim/vim prior to 9.0.1247. |
| CVE-2023-0433 | High | 2023-01-21 | Not applicable | Proof of concept only | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225. |
| CVE-2022-47024 | High | 2023-01-20 | Not applicable | No public exploit | A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or other unspecified impacts. |
| CVE-2023-0288 | High | 2023-01-13 | Not applicable | Proof of concept only | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189. |
| CVE-2023-0054 | High | 2023-01-04 | Not applicable | Proof of concept only | Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145. |
| CVE-2023-0051 | High | 2023-01-04 | Not applicable | Proof of concept only | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144. |
| CVE-2023-0049 | High | 2023-01-04 | Not applicable | Proof of concept only | Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143. |
| CVE-2022-4292 | High | 2022-12-05 | Not applicable | Proof of concept only | Use After Free in GitHub repository vim/vim prior to 9.0.0882. |
| CVE-2022-3491 | High | 2022-12-03 | Not applicable | Proof of concept only | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0742. |
| CVE-2022-3591 | High | 2022-12-02 | Not applicable | Proof of concept only | Use After Free in GitHub repository vim/vim prior to 9.0.0789. |
| CVE-2022-4141 | High | 2022-11-25 | Not applicable | Proof of concept only | Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command. |
| CVE-2022-3705 | High | 2022-10-26 | Outside Waratek scope | No public exploit | A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qf_update_buffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to address this issue. The name of the patch is d0fab10ed2a86698937e3c3fed2f10bd9bb5e731. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-212324. |
| CVE-2022-3352 | High | 2022-09-29 | Not applicable | Proof of concept only | Use After Free in GitHub repository vim/vim prior to 9.0.0614. |
| CVE-2022-3324 | High | 2022-09-27 | Not applicable | Proof of concept only | Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598. |
| CVE-2022-3297 | High | 2022-09-25 | Not applicable | Proof of concept only | Use After Free in GitHub repository vim/vim prior to 9.0.0579. |
| CVE-2022-3296 | High | 2022-09-25 | Not applicable | Proof of concept only | Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0577. |
| CVE-2022-3256 | High | 2022-09-22 | Not applicable | Proof of concept only | Use After Free in GitHub repository vim/vim prior to 9.0.0530. |
| CVE-2022-3235 | High | 2022-09-18 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 9.0.0490. |
| CVE-2022-3234 | High | 2022-09-17 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0483. |
| CVE-2022-3134 | High | 2022-09-06 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 9.0.0389. |
| CVE-2022-3099 | High | 2022-09-03 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 9.0.0360. |
| CVE-2022-37173 | High | 2022-08-30 | Not applicable | No public exploit | An issue in the installer of gvim 9.0.0000 allows authenticated attackers to execute arbitrary code via a binary hijacking attack on C:\Program.exe. |
| CVE-2022-3037 | High | 2022-08-30 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 9.0.0322. |
| CVE-2022-3016 | High | 2022-08-28 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 9.0.0286. |
| CVE-2022-2982 | High | 2022-08-25 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 9.0.0260. |
| CVE-2022-2946 | High | 2022-08-23 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 9.0.0246. |
| CVE-2022-2889 | High | 2022-08-19 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 9.0.0225. |
| CVE-2022-2862 | High | 2022-08-17 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 9.0.0221. |
| CVE-2022-2849 | High | 2022-08-17 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0220. |
| CVE-2022-2845 | High | 2022-08-17 | Not applicable | No public exploit | Improper Validation of Specified Quantity in Input in GitHub repository vim/vim prior to 9.0.0218. |
| CVE-2022-2819 | High | 2022-08-15 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0211. |
| CVE-2022-2817 | High | 2022-08-15 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 9.0.0213. |
| CVE-2022-2816 | High | 2022-08-15 | Not applicable | No public exploit | Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0212. |
| CVE-2022-2581 | High | 2022-08-01 | Not applicable | No public exploit | Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0104. |
| CVE-2022-2580 | High | 2022-08-01 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0102. |
| CVE-2022-2571 | High | 2022-08-01 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101. |
| CVE-2022-2522 | High | 2022-07-25 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0061. |
| CVE-2022-2345 | High | 2022-07-08 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 9.0.0046. |
| CVE-2022-2344 | High | 2022-07-08 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0045. |
| CVE-2022-2343 | High | 2022-07-08 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0044. |
| CVE-2022-2304 | High | 2022-07-05 | Not applicable | No public exploit | Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0. |
| CVE-2022-2289 | High | 2022-07-03 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 9.0. |
| CVE-2022-2288 | High | 2022-07-03 | Not applicable | No public exploit | Out-of-bounds Write in GitHub repository vim/vim prior to 9.0. |
| CVE-2022-2287 | High | 2022-07-02 | Not applicable | No public exploit | Out-of-bounds Read in GitHub repository vim/vim prior to 9.0. |
| CVE-2022-2286 | High | 2022-07-02 | Not applicable | No public exploit | Out-of-bounds Read in GitHub repository vim/vim prior to 9.0. |
| CVE-2022-2285 | High | 2022-07-02 | Not applicable | No public exploit | Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0. |
| CVE-2022-2284 | High | 2022-07-02 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0. |
| CVE-2022-2264 | High | 2022-07-01 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0. |
| CVE-2022-2257 | High | 2022-06-30 | Not applicable | No public exploit | Out-of-bounds Read in GitHub repository vim/vim prior to 9.0. |
| CVE-2022-2210 | High | 2022-06-27 | Not applicable | No public exploit | Out-of-bounds Write in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-2207 | High | 2022-06-27 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-2206 | High | 2022-06-26 | Not applicable | No public exploit | Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-2183 | High | 2022-06-23 | Not applicable | No public exploit | Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-2182 | High | 2022-06-23 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-2175 | High | 2022-06-23 | Not applicable | No public exploit | Buffer Over-read in GitHub repository vim/vim prior to 8.2. |