Vim/Vim vulnerabilities, page 4
159 vulnerabilities
Known vulnerabilities in Vim/Vim, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2022-2124alpinevim+7
EPSS score1.57%
Buffer Over-read in GitHub repository vim/vim prior to 8.2.CVE-2022-2183debianvim+4EPSS score1.52%
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.CVE-2022-2581debianvim+3EPSS score0.50%
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0104.CVE-2022-1621alpinevim+7EPSS score2.38%
Heap buffer overflow in vim_strncpy find_word in GitHub repository vim/vim prior to 8.2.4919. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote executionCVE-2022-1968applemacos+5EPSS score1.41%
Use After Free in GitHub repository vim/vim prior to 8.2.CVE-2022-1886alpinevim+5EPSS score1.37%
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.CVE-2022-1420applemacos+5EPSS score1.45%
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774.CVE-2022-1851alpinevim+7EPSS score1.63%
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.CVE-2022-1942applemacos+6EPSS score1.62%
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.CVE-2022-1160alpinevim+3EPSS score1.31%
heap buffer overflow in get_one_sourceline in GitHub repository vim/vim prior to 8.2.4647.CVE-2022-1898alpinevim+7EPSS score1.46%
Use After Free in GitHub repository vim/vim prior to 8.2.CVE-2022-1629alpinevim+6EPSS score1.91%
Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote executionCVE-2022-1927applemacos+5EPSS score1.66%
Buffer Over-read in GitHub repository vim/vim prior to 8.2.CVE-2022-1620alpinevim+6EPSS score1.59%
NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in GitHub repository vim/vim prior to 8.2.4901. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 allows attackers to cause a denial of service (application crash) via a crafted input.CVE-2022-1735applemacos+4EPSS score1.30%
Classic Buffer Overflow in GitHub repository vim/vim prior to 8.2.4969.CVE-2022-1154alpinevim+19EPSS score1.46%
Use after free in utf_ptr2char in GitHub repository vim/vim prior to 8.2.4646.CVE-2022-1771debianvim+3EPSS score1.21%
Uncontrolled Recursion in GitHub repository vim/vim prior to 8.2.4975.CVE-2022-1796alpinevim+4EPSS score1.14%
Use After Free in GitHub repository vim/vim prior to 8.2.4979.CVE-2022-1720applemacos+6EPSS score2.18%
Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.CVE-2022-1619alpinevim+9EPSS score2.54%
Heap-based Buffer Overflow in function cmdline_erase_chars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing software, modify memory, and possible remote execution