Overview 170 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 4 public PoC · 0 EPSS ≥ 0.5
170matches
0in Waratek scope0.0%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
4public PoC2.4%
0EPSS ≥ 0.50.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
1
0.6%
Not applicable
169
99.4%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
170
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
4
2.4%
Proof of concept only
28
16.5%
Forecast only
0
0.0%
No public exploit
138
81.2%
split by
peak 94 / year
20082
Not applicable2
High2
not blocked2
Working exploit published2
20094
Not applicable4
High4
not blocked4
Working exploit published1
No public exploit3
20101
Not applicable1
High1
not blocked1
No public exploit1
20110
20120
20130
20140
20150
20161
Not applicable1
High1
not blocked1
No public exploit1
20171
Not applicable1
High1
not blocked1
No public exploit1
20180
20192
Not applicable2
High2
not blocked2
Working exploit published1
No public exploit1
20200
202118
Not applicable18
High18
not blocked18
No public exploit18
202294
Outside Waratek scope1
Not applicable93
High94
not blocked94
Proof of concept only9
No public exploit85
202321
Not applicable21
High21
not blocked21
Proof of concept only18
No public exploit3
20241
Not applicable1
High1
not blocked1
Proof of concept only1
20252
Not applicable2
High2
not blocked2
No public exploit2
202623
Not applicable23
High23
not blocked23
No public exploit23
2008201020122014201620182020202220242026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-73073 | High | 2026-08-18 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers() in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an unterminated collection followed by a command separator to execute arbitrary Ex and operating-system commands when a user invokes C omni-completion with CTRL-X CTRL-O on a member access whose type is resolved from that tags file. This issue is fixed in version 9.2.0845. |
| CVE-2026-73078 | High | 2026-08-11 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to 9.2.0840, runtime/plugin/netrwPlugin.vim loads netrw and runtime/pack/dist/opt/netrw/autoload/netrw.vim constructs Bookmarks, History, and Targets menu entries by interpolating attacker-controlled directory paths into executed :menu commands. s:NetrwBookmarkMenu(), s:NetrwTgtMenu(), g:netrw_menu_escape, EX_TRLBAR, and netrw#MakeTgt() fail to neutralize the | command separator or single quotes at five construction sites, allowing a crafted path browsed or bookmarked in GUI Vim to execute arbitrary Ex and operating-system commands. This issue is fixed in version 9.2.0840. |
| CVE-2026-73077 | High | 2026-08-11 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual-mode selections from K through keywordprg commands without safely separating shell arguments. fnameescape() and PATH_ESC_CHARS do not neutralize shell metacharacters before ShKeywordPrg, ZshKeywordPrg, or GetHelp invokes bash, zsh, or PowerShell, allowing arbitrary operating-system commands to execute with the privileges of the user running Vim. This issue is fixed in version 9.2.0839. |
| CVE-2026-73076 | High | 2026-08-11 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named .VimballRecord to overwrite the installation record with attacker-chosen commands. When vimball#RmVimball() later processes the matching record entry, the stored Ex commands, including operating-system commands invoked through :!, execute with the privileges of the user running Vim. This issue is fixed in version 9.2.0847. |
| CVE-2026-73074 | High | 2026-08-11 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to 9.2.0841, prop_add_one() in src/textprop.c uses the proplen value from get_text_props() to increment a uint16_t property count beyond 0xffff, wrapping the count to zero and copying existing text-property records into a heap allocation sized for none of them. This issue is fixed in version 9.2.0841. |
| CVE-2026-73072 | High | 2026-08-11 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to 9.2.0846, set_sofo() in src/spellfile.c reuses sl_sal_first[] without resetting values left by set_sal_first(), so a crafted spell file containing an SN_SAL section before an SN_SOFO section causes under-counted mapping lists and attacker-influenced writes beyond a heap allocation. This issue is fixed in version 9.2.0846. |
| CVE-2026-51401 | High | 2026-08-04 | Not applicable | No public exploit | An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vms_fixfilename() function within file vim/src/os_vms.c |
| CVE-2026-51400 | High | 2026-08-04 | Not applicable | No public exploit | An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vms_fixfilename() function within file vim/src/os_vms.c |
| CVE-2026-59858 | High | 2026-07-09 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim interpolates the typeref: or typename: extension field of a tags entry, without escaping, into a :vimgrep pattern that is run through :execute. Because :vimgrep honors the bar as a command separator, a crafted tag field can close the search pattern and append an arbitrary Ex command; opening a hostile .c file whose project tags file contains such an entry and invoking C omni-completion runs that command as the editing user. This issue is fixed in version 9.2.0735. |
| CVE-2026-59856 | High | 2026-07-09 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to 9.2.0736, the PHP omni-completion script in runtime/autoload/phpcomplete.vim interpolates a class or trait name, taken from the contents of the edited buffer, into a search() pattern that is run via win_execute() without escaping. A name containing a single quote can terminate the search() string argument early, and because the bar is honored as an Ex command separator, the remainder of the name is run as Ex commands; via the :! command this allows arbitrary operating-system command execution when a victim opens a crafted PHP file and invokes omni-completion. This issue is fixed in version 9.2.0736. |
| CVE-2026-57456 | High | 2026-06-25 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to 9.2.0699, Vim's Python omni-completion (runtime/autoload/python3complete.vim and the legacy pythoncomplete.vim) executes reconstructed function and class definitions from the current buffer with exec() as part of populating the completion dictionary. When reconstructing that source, each scope's docstring is inserted verbatim between triple quotes with no escaping, so a hostile buffer can break out of the triple-quoted literal and execute attacker-controlled Python during omni-completion. This vulnerability is fixed in 9.2.0699. |
| CVE-2026-57453 | High | 2026-06-25 | Not applicable | No public exploit | Vim is an open source, command line text editor. From 9.1.1784 until 9.2.0678, when the bundled zip plugin autoload/zip.vim falls back to PowerShell to browse, read, extract, update or delete entries in a zip archive, it builds the PowerShell command by inserting archive entry names that are quoted only for the shell, not for PowerShell. A crafted entry name can break out of the intended string context and cause PowerShell to execute arbitrary commands with the privileges of the user running Vim, triggered by opening, viewing or extracting the archive. This vulnerability is fixed in 9.2.0678. |
| CVE-2026-52860 | High | 2026-06-11 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to version 9.2.0597, Vim's Python omni-completion executes reconstructed function and class definitions from the current buffer with exec() as part of populating the completion dictionary. Python evaluates function default values, parameter annotations, and class base expressions at definition time, so a hostile buffer can execute attacker-controlled Python expressions during omni-completion. The existing g:pythoncomplete_allow_import mitigation (GHSA-52mc-rq6p-rc7c) does not cover this path, because the attacker-controlled code is not a harvested import/from statement. This issue has been patched in version 9.2.0597. |
| CVE-2026-52858 | High | 2026-06-11 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to version 9.2.0561, the Python omni-completion script in python3complete.vim for Vim with the +python3 interpreter enabled (and the legacy pythoncomplete.vim for builds with the +python interpreter) executes the import and from statements found in the current buffer through Python's import machinery. Because the buffer's working directory is on sys.path, opening a hostile .py file with a sibling Python package and invoking omni-completion runs that package's top-level code as the editing user. This issue has been patched in version 9.2.0561. |
| CVE-2026-47162 | High | 2026-06-11 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave() in the netrw plugin (runtime/pack/dist/opt/netrw/autoload/netrw.vim) when serializing browsed directory paths to the history file ~/.vim/.netrwhist. A directory name derived from the filesystem is interpolated into a single-quoted Vimscript string literal without escaping embedded single quotes, allowing a crafted directory name to break out of the string context and execute arbitrary Vimscript, including shell commands via system() and :!, the next time the history file is sourced. This issue has been patched in version 9.2.0495. |
| CVE-2026-46483 | High | 2026-05-15 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tar#Vimuntar() in runtime/autoload/tar.vim when decompressing .tgz archives on Unix-like systems. The function builds :!gunzip and :!gzip -d commands using shellescape(tartail) without the {special} flag, allowing a crafted archive filename to trigger Vim cmdline-special expansion and execute shell commands in the user's context. This vulnerability is fixed in 9.2.0479. |
| CVE-2026-39881 | High | 2026-04-08 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to 9.2.0316, a command injection vulnerability in Vim's netbeans interface allows a malicious netbeans server to execute arbitrary Ex commands when Vim connects to it, via unsanitized strings in the defineAnnoType and specialKeys protocol messages. This vulnerability is fixed in 9.2.0316. |
| CVE-2026-35177 | High | 2026-04-06 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to 9.2.0280, a path traversal bypass in Vim's zip.vim plugin allows overwriting of arbitrary files when opening specially crafted zip archives, circumventing the previous fix for CVE-2025-53906. This vulnerability is fixed in 9.2.0280. |
| CVE-2026-34982 | High | 2026-04-06 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command execution when a user opens a crafted file. The `complete`, `guitabtooltip` and `printheader` options are missing the `P_MLE` flag, allowing a modeline to be executed. Additionally, the `mapset()` function lacks a `check_secure()` call, allowing it to be abused from sandboxed expressions. Commit 9.2.0276 fixes the issue. |
| CVE-2026-33412 | High | 2026-03-24 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob() function on Unix-like systems. By including a newline character (\n) in a pattern passed to glob(), an attacker may be able to execute arbitrary shell commands. This vulnerability depends on the user's 'shell' setting. This issue has been patched in version 9.2.0202. |
| CVE-2026-28421 | High | 2026-02-27 | Not applicable | No public exploit | Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault (SEGV) exist in Vim's swap file recovery logic. Both are caused by unvalidated fields read from crafted pointer blocks within a swap file. Version 9.2.0077 fixes the issue. |
| CVE-2026-28417 | High | 2026-02-27 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the `netrw` standard plugin bundled with Vim. By inducing a user to open a crafted URL (e.g., using the `scp://` protocol handler), an attacker can execute arbitrary shell commands with the privileges of the Vim process. Version 9.2.0073 fixes the issue. |
| CVE-2026-26269 | High | 2026-02-13 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to 9.1.2148, a stack buffer overflow vulnerability exists in Vim's NetBeans integration when processing the specialKeys command, affecting Vim builds that enable and use the NetBeans feature. The Stack buffer overflow exists in special_keys() (in src/netbeans.c). The while (*tok) loop writes two bytes per iteration into a 64-byte stack buffer (keybuf) with no bounds check. A malicious NetBeans server can overflow keybuf with a single specialKeys command. The issue has been fixed as of Vim patch v9.1.2148. |
| CVE-2025-66476 | High | 2025-12-02 | Not applicable | No public exploit | Vim is an open source, command line text editor. Prior to version 9.1.1947, an uncontrolled search path vulnerability on Windows allows Vim to execute malicious executables placed in the current working directory for the current edited file. On Windows, when using cmd.exe as a shell, Vim resolves external commands by searching the current working directory before system paths. When Vim invokes tools such as findstr for :grep, external commands or filters via :!, or compiler/:make commands, it may inadvertently run a malicious executable present in the same directory as the file being edited. The issue affects Vim for Windows prior to version 9.1.1947. |
| CVE-2025-27423 | High | 2025-03-03 | Not applicable | No public exploit | Vim is an open source, command line text editor. Vim is distributed with the tar.vim plugin, that allows easy editing and viewing of (compressed or uncompressed) tar files. Starting with 9.1.0858, the tar.vim plugin uses the ":read" ex command line to append below the cursor position, however the is not sanitized and is taken literally from the tar archive. This allows to execute shell commands via special crafted tar archives. Whether this really happens, depends on the shell being used ('shell' option, which is set using $SHELL). The issue has been fixed as of Vim patch v9.1.1164 |
| CVE-2024-22667 | High | 2024-02-05 | Not applicable | Proof of concept only | Vim before 9.0.2142 has a stack-based buffer overflow because did_set_langmap in map.c calls sprintf to write to the error buffer that is passed down to the option callback functions. |
| CVE-2023-5535 | High | 2023-10-11 | Not applicable | Proof of concept only | Use After Free in GitHub repository vim/vim prior to v9.0.2010. |
| CVE-2023-5344 | High | 2023-10-02 | Not applicable | Proof of concept only | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969. |
| CVE-2023-4781 | High | 2023-09-05 | Not applicable | Proof of concept only | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873. |
| CVE-2023-4752 | High | 2023-09-04 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 9.0.1858. |
| CVE-2023-4750 | High | 2023-09-04 | Not applicable | Proof of concept only | Use After Free in GitHub repository vim/vim prior to 9.0.1857. |
| CVE-2023-4733 | High | 2023-09-04 | Not applicable | Proof of concept only | Use After Free in GitHub repository vim/vim prior to 9.0.1840. |
| CVE-2023-4751 | High | 2023-09-03 | Not applicable | Proof of concept only | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331. |
| CVE-2023-4738 | High | 2023-09-02 | Not applicable | Proof of concept only | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848. |
| CVE-2023-4736 | High | 2023-09-02 | Not applicable | Proof of concept only | Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833. |
| CVE-2023-4735 | High | 2023-09-02 | Not applicable | Proof of concept only | Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847. |
| CVE-2023-4734 | High | 2023-09-02 | Not applicable | Proof of concept only | Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846. |
| CVE-2023-3896 | High | 2023-08-07 | Not applicable | No public exploit | Divide By Zero in vim/vim from 9.0.1367-1 to 9.0.1367-3 |
| CVE-2023-2610 | High | 2023-05-09 | Not applicable | Proof of concept only | Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1532. |
| CVE-2023-1127 | High | 2023-03-01 | Not applicable | Proof of concept only | Divide By Zero in GitHub repository vim/vim prior to 9.0.1367. |
| CVE-2023-0512 | High | 2023-01-30 | Not applicable | Proof of concept only | Divide By Zero in GitHub repository vim/vim prior to 9.0.1247. |
| CVE-2023-0433 | High | 2023-01-21 | Not applicable | Proof of concept only | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225. |
| CVE-2022-47024 | High | 2023-01-20 | Not applicable | No public exploit | A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or other unspecified impacts. |
| CVE-2023-0288 | High | 2023-01-13 | Not applicable | Proof of concept only | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189. |
| CVE-2023-0054 | High | 2023-01-04 | Not applicable | Proof of concept only | Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145. |
| CVE-2023-0051 | High | 2023-01-04 | Not applicable | Proof of concept only | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144. |
| CVE-2023-0049 | High | 2023-01-04 | Not applicable | Proof of concept only | Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143. |
| CVE-2022-4292 | High | 2022-12-05 | Not applicable | Proof of concept only | Use After Free in GitHub repository vim/vim prior to 9.0.0882. |
| CVE-2022-3491 | High | 2022-12-03 | Not applicable | Proof of concept only | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0742. |
| CVE-2022-3591 | High | 2022-12-02 | Not applicable | Proof of concept only | Use After Free in GitHub repository vim/vim prior to 9.0.0789. |
| CVE-2022-4141 | High | 2022-11-25 | Not applicable | Proof of concept only | Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command. |
| CVE-2022-3705 | High | 2022-10-26 | Outside Waratek scope | No public exploit | A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qf_update_buffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to address this issue. The name of the patch is d0fab10ed2a86698937e3c3fed2f10bd9bb5e731. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-212324. |
| CVE-2022-3352 | High | 2022-09-29 | Not applicable | Proof of concept only | Use After Free in GitHub repository vim/vim prior to 9.0.0614. |
| CVE-2022-3324 | High | 2022-09-27 | Not applicable | Proof of concept only | Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598. |
| CVE-2022-3297 | High | 2022-09-25 | Not applicable | Proof of concept only | Use After Free in GitHub repository vim/vim prior to 9.0.0579. |
| CVE-2022-3296 | High | 2022-09-25 | Not applicable | Proof of concept only | Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0577. |
| CVE-2022-3256 | High | 2022-09-22 | Not applicable | Proof of concept only | Use After Free in GitHub repository vim/vim prior to 9.0.0530. |
| CVE-2022-3235 | High | 2022-09-18 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 9.0.0490. |
| CVE-2022-3234 | High | 2022-09-17 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0483. |
| CVE-2022-3134 | High | 2022-09-06 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 9.0.0389. |
| CVE-2022-3099 | High | 2022-09-03 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 9.0.0360. |
| CVE-2022-37173 | High | 2022-08-30 | Not applicable | No public exploit | An issue in the installer of gvim 9.0.0000 allows authenticated attackers to execute arbitrary code via a binary hijacking attack on C:\Program.exe. |
| CVE-2022-3037 | High | 2022-08-30 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 9.0.0322. |
| CVE-2022-3016 | High | 2022-08-28 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 9.0.0286. |
| CVE-2022-2982 | High | 2022-08-25 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 9.0.0260. |
| CVE-2022-2946 | High | 2022-08-23 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 9.0.0246. |
| CVE-2022-2889 | High | 2022-08-19 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 9.0.0225. |
| CVE-2022-2862 | High | 2022-08-17 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 9.0.0221. |
| CVE-2022-2849 | High | 2022-08-17 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0220. |
| CVE-2022-2845 | High | 2022-08-17 | Not applicable | No public exploit | Improper Validation of Specified Quantity in Input in GitHub repository vim/vim prior to 9.0.0218. |
| CVE-2022-2819 | High | 2022-08-15 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0211. |
| CVE-2022-2817 | High | 2022-08-15 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 9.0.0213. |
| CVE-2022-2816 | High | 2022-08-15 | Not applicable | No public exploit | Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0212. |
| CVE-2022-2581 | High | 2022-08-01 | Not applicable | No public exploit | Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0104. |
| CVE-2022-2580 | High | 2022-08-01 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0102. |
| CVE-2022-2571 | High | 2022-08-01 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101. |
| CVE-2022-2522 | High | 2022-07-25 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0061. |
| CVE-2022-2345 | High | 2022-07-08 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 9.0.0046. |
| CVE-2022-2344 | High | 2022-07-08 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0045. |
| CVE-2022-2343 | High | 2022-07-08 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0044. |
| CVE-2022-2304 | High | 2022-07-05 | Not applicable | No public exploit | Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0. |
| CVE-2022-2289 | High | 2022-07-03 | Not applicable | No public exploit | Use After Free in GitHub repository vim/vim prior to 9.0. |
| CVE-2022-2288 | High | 2022-07-03 | Not applicable | No public exploit | Out-of-bounds Write in GitHub repository vim/vim prior to 9.0. |
| CVE-2022-2287 | High | 2022-07-02 | Not applicable | No public exploit | Out-of-bounds Read in GitHub repository vim/vim prior to 9.0. |
| CVE-2022-2286 | High | 2022-07-02 | Not applicable | No public exploit | Out-of-bounds Read in GitHub repository vim/vim prior to 9.0. |
| CVE-2022-2285 | High | 2022-07-02 | Not applicable | No public exploit | Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0. |
| CVE-2022-2284 | High | 2022-07-02 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0. |
| CVE-2022-2264 | High | 2022-07-01 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0. |
| CVE-2022-2257 | High | 2022-06-30 | Not applicable | No public exploit | Out-of-bounds Read in GitHub repository vim/vim prior to 9.0. |
| CVE-2022-2210 | High | 2022-06-27 | Not applicable | No public exploit | Out-of-bounds Write in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-2207 | High | 2022-06-27 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-2206 | High | 2022-06-26 | Not applicable | No public exploit | Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-2183 | High | 2022-06-23 | Not applicable | No public exploit | Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-2182 | High | 2022-06-23 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-2175 | High | 2022-06-23 | Not applicable | No public exploit | Buffer Over-read in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-1720 | High | 2022-06-20 | Not applicable | No public exploit | Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software, memory modification, and possible remote execution. |
| CVE-2022-2129 | High | 2022-06-19 | Not applicable | No public exploit | Out-of-bounds Write in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-2126 | High | 2022-06-19 | Not applicable | No public exploit | Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-2125 | High | 2022-06-19 | Not applicable | No public exploit | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-2124 | High | 2022-06-19 | Not applicable | No public exploit | Buffer Over-read in GitHub repository vim/vim prior to 8.2. |