Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Neovim

First CVE: Jun 5, 2019Active for: 7 yearsTotal CVEs: 6

Neovim is a widely embedded terminal text editor that serves as a modern fork and extension point for Vi/Vim across development environments, and despite a narrow product scope has attracted sustained security research interest relative to its codebase maturity. Vulnerabilities affecting the editor recur through memory-safety and command-handling weakness classes—heap-based buffer overflows, OS command injection, integer overflows, out-of-bounds writes, and use-after-free conditions—that reflect the parsing demands of a text-processing engine and tend to acquire public exploit tooling. Current severity and exploitation status are shown alongside this summary.

FAUCET AI Generated
6
Total CVEs
More Total CVEs than 86% of tracked vendors
1.2
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 74% of tracked vendors
6.5
Avg CVSS Score
Higher Avg CVSS Score than 39% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Neovim over time

Volume of CVEsAvg CVSS Base Score
First CVE
Jun 5, 2019
7 years ago
Most Recent CVE
May 8, 2026
77 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (6 CVEs).

6 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2019-12735HIGH
getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by execute
Jun 5, 20198.648NOYES
CVE-2021-4019HIGH
vim is vulnerable to Heap-based Buffer Overflow
Dec 1, 20217.826NONO
CVE-2026-45130MEDIUM
Vim is an open source, command line text editor. Prior to version 9.2.0450, a heap buffer overflow exists in read_compound() in src/spellfile.c when loading a crafted spell file (.
May 8, 20265.525NONO
CVE-2026-25749MEDIUM
Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'help
Feb 6, 20266.624NONO
CVE-2025-22134MEDIUM
When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does not properly end visual mode and
Jan 13, 20255.517NONO
CVE-2024-43374MEDIUM
The UNIX editor Vim prior to version 9.1.0678 has a use-after-free error in argument list handling. When adding a new file to the argument list, this triggers `Buf*` autocommands.
Aug 16, 20244.717NONO
View all 6 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products6 CVEs
67%
33%
Severity distribution among all CVEs352,294 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local6 (100.0%)
Network0 (0.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low5 (83.3%)
High1 (16.7%)
Unknown0 (0.0%)
User Interaction
None1 (16.7%)
Unknown0 (0.0%)
Required5 (83.3%)
Privileges Required
Low2 (33.3%)
High0 (0.0%)
None4 (66.7%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (6 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
16.7% of CVEs· 77th percentile

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Neovim.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Neovim — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Neovim's Products

View all 3 CNAs →

Top CWEs