How many CVEs does Vim have?

Vim has 262 published CVE records since 2001, including 49 in the last two years.

How many Vim CVEs are in CISA KEV?

None of Vim's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which Vim products have the most CVEs?

The Vim products with the most published CVEs are vim, vim/vim, xxd, gvim, tar.vim plugin.

What are the most common weakness types in Vim CVEs?

Vim's CVEs most often map to these CWE weakness types: CWE-122 (Heap-based Buffer Overflow), CWE-416 (Use After Free), CWE-125 (Out-of-bounds Read), CWE-476 (NULL Pointer Dereference).

Are there public exploits for Vim vulnerabilities?

Yes — 52 of Vim's CVEs have a known public exploit.

How many critical Vim vulnerabilities are there?

Vim has 15 critical and 159 high-severity CVEs.

What is the average severity of Vim CVEs?

The average CVSS base score across Vim's scored CVEs is 7.0.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

262 CVEs

Vim Vulnerabilities

Name: Vim vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Vim.

262

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

52

Public exploits

PoC or exploit code

7.0

Avg CVSS

2001–2026

Overview

Vim has 262 published CVE records since 2001, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 52 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Vim products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on Vim's vulnerability posture, as a share of its 262 published CVEs.

Average CVSS: 7.0
Critical / high: 66%
Actively exploited (KEV): 0%
Public exploit available: 20%
Patch available: 97%

Severity and exploitation

How the CVSS severity of Vim's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical15

High159

Medium83

Low5

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Vim's CVEs are currently listed in CISA's KEV catalog.

Public exploits

52

52 of Vim's CVEs have a known public exploit available.

Most affected products

The Vim products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in Vim CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish Vim CVE records.

Disclosure activity by year

How many Vim CVEs were published each year.

2019

3

2020

1

2021

21

2022

115

2023

39

2024

8

2025

13

2026

36

Latest Vim CVEs

The most recently disclosed vulnerabilities affecting Vim.

Vim: Arbitrary Code Execution via PHP Omni-Completion
CWE-94
High · CVSS 8.4
EPSS 0.2%2026-07-09
Vim: Arbitrary Code Execution via C Omni-Completion
CWE-94
High · CVSS 8.4
EPSS 0.1%2026-07-09
Vim: Out-of-bounds Write in SAL Soundfolding
CWE-787
Medium · CVSS 5.6
EPSS 0.1%2026-07-09
Vim: Out-of-bounds Write in Spell File Word Count
CWE-787
Medium · CVSS 5.7
EPSS 0.1%2026-06-25
Vim: Out-of-bounds Write in Spell File Prefix Dump
CWE-787
Medium · CVSS 5.5
EPSS 0.1%2026-06-25
Vim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filename
CWE-78
Medium · CVSS 5.7
EPSS 0.2%2026-06-25
Vim: Out-of-bounds Read in Text Property Count
CWE-125
Medium · CVSS 6.1
EPSS 0.1%2026-06-25
Vim: Out-of-bounds Read with libsodium-encrypted Files
CWE-125
Medium · CVSS 5.5
EPSS 0.1%2026-06-25
Vim: PowerShell Command Injection via Unescaped Filename in zip.vim Extraction
CWE-77
High · CVSS 7.3
EPSS 0.1%2026-06-25
Vim: Out-of-bounds Read with Text Properties
CWE-125
Medium · CVSS 6.8
EPSS 0.1%2026-06-25
Vim: Stack out-of-bounds write in `spell_soundfold_sofo()` via an over-length `soundfold()` argument
CWE-787
Medium · CVSS 4.0
EPSS 0.1%2026-06-25
Vim: Arbitrary Code Execution via Python Omni-Completion Docstrings
CWE-94
High · CVSS 8.4
EPSS 0.1%2026-06-25

Track new Vim CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor Vim CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

phpMyAdmin272 CVEs libtiff266 CVEs Artifex262 CVEs Elastic261 CVEs ISC259 CVEs sgi259 CVEs ABB257 CVEs Samba253 CVEs

Browse all vendors

Frequently asked questions

Common questions about Vim vulnerabilities.

How many CVEs does Vim have?: Vim has 262 published CVE records since 2001, including 49 in the last two years.
How many Vim CVEs are in CISA KEV?: None of Vim's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which Vim products have the most CVEs?: The Vim products with the most published CVEs are vim, vim/vim, xxd, gvim, tar.vim plugin.
What are the most common weakness types in Vim CVEs?: Vim's CVEs most often map to these CWE weakness types: CWE-122 (Heap-based Buffer Overflow), CWE-416 (Use After Free), CWE-125 (Out-of-bounds Read), CWE-476 (NULL Pointer Dereference).
Are there public exploits for Vim vulnerabilities?: Yes — 52 of Vim's CVEs have a known public exploit.
How many critical Vim vulnerabilities are there?: Vim has 15 critical and 159 high-severity CVEs.
What is the average severity of Vim CVEs?: The average CVSS base score across Vim's scored CVEs is 7.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Vim vulnerabilities

Monitor new Vim vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing