Vim vulnerabilities
We track 44 vulnerabilities in Vim products across 2 products. 44 are rated high or critical, and none are known to be exploited. The most recent was published on August 19, 2026.
Latest Vim vulnerabilities
- 7.5 High severity
vim/vim: NULL Pointer Dereference
NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in GitHub repository vim/vim prior to 8.2.4901. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 allows attackers to cause a denial of service (application crash)
- 7.8 High severity
vim/vim: Out-of-bounds Write
Heap-based Buffer Overflow in function cmdline_erase_chars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing software, modify memory, and possible remote execution
- 7.8 High severity
vim/vim: Use After Free
Use after free in append_command in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution
- 7.8 High severity
vim/vim: Out-of-bounds Write
global heap buffer overflow in skip_range in GitHub repository vim/vim prior to 8.2.4763. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution