How many Vim vim/vim CVEs are in CISA KEV?

None of Vim vim/vim's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for Vim vim/vim vulnerabilities?

Yes — 158 of Vim vim/vim's CVEs have a known public exploit.

Which versions of Vim vim/vim are affected?

210 distinct Vim vim/vim versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Vim vim/vim CVEs?

Vim vim/vim's CVEs most often map to these CWE weakness types: CWE-122 (Heap-based Buffer Overflow), CWE-416 (Use After Free), CWE-125 (Out-of-bounds Read), CWE-476 (NULL Pointer Dereference).

How many critical Vim vim/vim vulnerabilities are there?

Vim vim/vim has 2 critical and 129 high-severity CVEs.

What is the average severity of Vim vim/vim CVEs?

The average CVSS base score across Vim vim/vim's scored CVEs is 7.4.

Vim vim/vim Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Vim vim/vim vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Vim vim/vim Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Vim vim/vim has 159 published CVE records since 2021, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 158 have a known public exploit. The average CVSS base score across scored CVEs is 7.4.

Severity and exploitation

How the CVSS severity of Vim vim/vim's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High129

Medium27

Low1

In CISA’s Known Exploited Vulnerabilities catalog

None of Vim vim/vim's CVEs are currently listed in CISA's KEV catalog.

Public exploits

158

158 of Vim vim/vim's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Vim vim/vim version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 8.246 CVEs
< 9.09 CVEs
< 8.2.34031 CVE
< 8.2.34091 CVE
< 8.2.34871 CVE
< 8.2.34891 CVE
< 8.2.35641 CVE
< 8.2.35811 CVE
< 8.2.35821 CVE
< 8.2.36101 CVE
< 8.2.36111 CVE
< 8.2.36121 CVE

Common weakness types

The CWE weakness categories most often found in Vim vim/vim CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Vim vim/vim CVEs were published each year.

2021

2022

113

2023

Other Vim products

Browse vulnerabilities for other products by Vim.

vim272 CVEs gvim2 CVEs xxd2 CVEs Neovim1 CVEs netrw1 CVEs tar.vim1 CVEs tar.vim plugin1 CVEs zipplugin.vim1 CVEs

All Vim vulnerabilities

Frequently asked questions

Common questions about Vim vim/vim vulnerabilities.

How many CVEs does Vim vim/vim have?: Vim vim/vim has 159 published CVE records since 2021.
How many Vim vim/vim CVEs are in CISA KEV?: None of Vim vim/vim's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Vim vim/vim vulnerabilities?: Yes — 158 of Vim vim/vim's CVEs have a known public exploit.
Which versions of Vim vim/vim are affected?: 210 distinct Vim vim/vim versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Vim vim/vim CVEs?: Vim vim/vim's CVEs most often map to these CWE weakness types: CWE-122 (Heap-based Buffer Overflow), CWE-416 (Use After Free), CWE-125 (Out-of-bounds Read), CWE-476 (NULL Pointer Dereference).
How many critical Vim vim/vim vulnerabilities are there?: Vim vim/vim has 2 critical and 129 high-severity CVEs.
What is the average severity of Vim vim/vim CVEs?: The average CVSS base score across Vim vim/vim's scored CVEs is 7.4.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Vim vim/vim vulnerabilities

Get an alert for each new Vim vim/vim CVE, with AI-written analysis and remediation steps.

Create an account See pricing