Vulnerability index

Browse CVEs

95 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Vim HIGH 7.8
CVE-2026-59856

Vim is an open source, command line text editor. Prior to 9.2.0736, the PHP omni-completion script in runtime/autoload/phpcomplete.vim interpolates a…

Fix: 9.2.0736+
Fix from $1,950 2026-07-09
Vim HIGH 7.8
CVE-2026-59858

Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim interpolates the t…

Fix: 9.2.0735+
Fix from $1,950 2026-07-09
Vim MEDIUM 5.5
CVE-2026-59857

Vim is an open source, command line text editor. Prior to 9.2.0725, the single-byte branch of spell_soundfold_sal() in src/spell.c translates a word …

Fix: 9.2.0725+
Fix from $1,600 2026-07-09
Vim HIGH 7.8
CVE-2026-57455

Vim is an open source, command line text editor. Prior to 9.2.0698, the single-byte branch of spell_soundfold_sofo() in src/spell.c translates a word…

Fix: 9.2.0698+
Fix from $1,950 2026-06-25
Vim HIGH 7.8
CVE-2026-57456

Vim is an open source, command line text editor. Prior to 9.2.0699, Vim's Python omni-completion (runtime/autoload/python3complete.vim and the legacy…

Fix: 9.2.0699+
Fix from $1,950 2026-06-25
Vim HIGH 7.3
CVE-2026-57453

Vim is an open source, command line text editor. From 9.1.1784 until 9.2.0678, when the bundled zip plugin autoload/zip.vim falls back to PowerShell …

Fix: 9.2.0678+
Fix from $1,950 2026-06-25
Vim MEDIUM 6.1
CVE-2026-57451

Vim is an open source, command line text editor. Prior to 9.2.0670, get_text_props() in src/textprop.c reads a uint16 property count stored inline af…

Fix: 9.2.0670+
Fix from $1,600 2026-06-25
Vim MEDIUM 6.1
CVE-2026-57454

Vim is an open source, command line text editor. From 9.2.0320 until 9.2.0679, a crafted undo or swap file can store a virtual-text property whose of…

Fix: 9.2.0679+
Fix from $1,600 2026-06-25
Vim MEDIUM 5.5
CVE-2026-57452

Vim is an open source, command line text editor. Prior to 9.2.0671, when Vim opens a file encrypted with the VimCrypt~04! or VimCrypt~05! method (xch…

Fix: 9.2.0671+
Fix from $1,600 2026-06-25
Vim HIGH 7.8
CVE-2026-55895

Vim is an open source, command line text editor. Prior to 9.2.0663, a Vimscript code injection vulnerability exists in s:NetrwLocalRmFile() in the ne…

Fix: 9.2.0663+
Fix from $1,950 2026-06-25
Vim HIGH 7.8
CVE-2026-55693

Vim is an open source, command line text editor. Prior to 9.2.0653, the tree_count_words() function in src/spellfile.c fills in the word-count fields…

Fix: 9.2.0653+
Fix from $1,950 2026-06-25
Vim MEDIUM 5.5
CVE-2026-55892

Vim is an open source, command line text editor. Prior to 9.2.0662, the dump_prefixes() function in src/spell.c walks a spell-file prefix trie iterat…

Fix: 9.2.0662+
Fix from $1,600 2026-06-25
Vim HIGH 8.2
CVE-2026-52859

Vim is an open source, command line text editor. Prior to version 9.2.0565, the update_snapshot() function in src/terminal.c copies the visible termi…

Fix: 9.2.0565+
Fix from $1,950 2026-06-11
Vim HIGH 7.8
CVE-2026-52858

Vim is an open source, command line text editor. Prior to version 9.2.0561, the Python omni-completion script in python3complete.vim for Vim with the…

Fix: 9.2.0561+
Fix from $1,950 2026-06-11
Vim HIGH 7.8
CVE-2026-52860

Vim is an open source, command line text editor. Prior to version 9.2.0597, Vim's Python omni-completion executes reconstructed function and class de…

Fix: 9.2.0597+
Fix from $1,950 2026-06-11
Vim HIGH 8.8
CVE-2026-47162

Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave() …

Fix: 9.2.0495+
Fix from $1,950 2026-06-11
Vim MEDIUM 5.3
CVE-2026-47167

Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch() in the cucumber fi…

Fix: 9.2.0496+
Fix from $1,600 2026-06-11
Vim HIGH 7.0
CVE-2026-46483

Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tar#Vimuntar() in runtime/autoload/ta…

Fix: 9.2.0479+
Fix from $1,950 2026-05-15
Vim MEDIUM 5.3
CVE-2026-44656

Vim is an open source, command line text editor. Prior to version 9.2.0435, an OS command injection vulnerability exists in Vim's :find command-line …

Fix: 9.2.0435+
Fix from $1,600 2026-05-08
Vim MEDIUM 6.6
CVE-2026-41411

Vim is an open source, command line text editor. Prior to 9.2.0357, A command injection vulnerability exists in Vim's tag file processing. When resol…

Fix: 9.2.0357+
Fix from $1,600 2026-04-24
Vim HIGH 7.8
CVE-2026-39881

Vim is an open source, command line text editor. Prior to 9.2.0316, a command injection vulnerability in Vim's netbeans interface allows a malicious …

Fix: 9.2.0316+
Fix from $1,950 2026-04-08
Vim HIGH 7.1
CVE-2026-35177

Vim is an open source, command line text editor. Prior to 9.2.0280, a path traversal bypass in Vim's zip.vim plugin allows overwriting of arbitrary f…

Fix: 9.2.0280+
Fix from $1,950 2026-04-06
Vim HIGH 8.2
CVE-2026-34982

Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command execution wh…

Fix: 9.2.0276+
Fix from $1,950 2026-04-06
Vim HIGH 8.6
CVE-2026-34714

Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} injectio…

Fix: 9.2.0272+
Fix from $1,950 2026-03-30
Vim HIGH 7.3
CVE-2026-33412

Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob() function on Unix…

Fix: 9.2.0202+
Fix from $1,950 2026-03-24
Vim MEDIUM 5.5
CVE-2026-32249

Vim is an open source, command line text editor. From 9.1.0011 to before 9.2.0137, Vim's NFA regex compiler, when encountering a collection containin…

Fix: 9.2.0137+
Fix from $1,600 2026-03-12
Vim HIGH 7.8
CVE-2026-28421

Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault (SEGV) exist in Vim'…

Fix: 9.2.0077+
Fix from $1,950 2026-02-27
Vim MEDIUM 6.6
CVE-2026-28419

Vim is an open source, command line text editor. Prior to version 9.2.0075, a heap-based buffer underflow exists in Vim's Emacs-style tags file parsi…

Fix: 9.2.0075+
Fix from $1,600 2026-02-27
Vim MEDIUM 5.5
CVE-2026-28418

Vim is an open source, command line text editor. Prior to version 9.2.0074, a heap-based buffer overflow out-of-bounds read exists in Vim's Emacs-sty…

Fix: 9.2.0074+
Fix from $1,600 2026-02-27
Vim HIGH 7.8
CVE-2026-28417

Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the `netrw` standard plug…

Fix: 9.2.0073+
Fix from $1,950 2026-02-27