Vim

Vendor:

First CVE: Jun 16, 2008 · Active for 18 years

250
Total CVEs
Bottom 1%
20.8
Avg CVEs / Year
Bottom 1%
7.1
Avg CVSS
Higher Avg CVSS than 63% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Vim over time

Volume of CVEsAvg CVSS Base Score
First CVE
Jun 16, 2008
18 years ago
Most Recent CVE
Jul 9, 2026
15 days ago

CVE Severity & Scoring

Vim250 CVEs
All CVEs352,294 CVEs
LowMediumHighCritical
Attack Vector
Local217 (86.8%)
Network23 (9.2%)
Unknown10 (4.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low228 (91.2%)
High12 (4.8%)
Unknown10 (4.0%)
User Interaction
None30 (12.0%)
Unknown10 (4.0%)
Required210 (84.0%)
Privileges Required
Low28 (11.2%)
High0 (0.0%)
None212 (84.8%)
Unknown10 (4.0%)

Top CVEs

Signals from CVEs in this product scope (250 CVEs).

250 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by execute
Jun 5, 20198.648NOYES
Vim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary commands via Vim scripts that do not properly sanitize inputs before invoking the ex
Jun 16, 20089.343NOYES
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
Feb 14, 20227.841NONO
Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to (1) execute arbitrary shell commands by entering a K keystroke on a
Sep 18, 20089.339NOYES
Vim is an open source, command line text editor. Prior to 9.2.0736, the PHP omni-completion script in runtime/autoload/phpcomplete.vim interpolates a class or trait name, taken fro
Jul 9, 20267.837NONO
Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave() in the netrw plugin (runtime/pa
Jun 11, 20268.837NONO
The Netrw plugin 125 in netrw.vim in Vim 7.2a.10 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames used by the execute and system funct
Feb 21, 20099.337NOYES
Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim interpolates the typeref: or typename: extension
Jul 9, 20267.836NONO
Vim is an open source, command line text editor. Prior to 9.2.0699, Vim's Python omni-completion (runtime/autoload/python3complete.vim and the legacy pythoncomplete.vim) executes r
Jun 25, 20267.835NONO
Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} injection occurs with tabpanel lacking
Mar 30, 20268.635NONO

Exploit Exposure

Signals from CVEs in this product scope (250 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
5 CVEs
2.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (250 CVEs).

Media Mentions

Signals from CVEs in this product scope (250 CVEs).

Top CNAs Publishing CVEs For Vim

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
9.1.000015.50.2%00
9.0.136717.80.4%00
8.2.234815.50.3%00
8.1.213519.81.5%00
8.017.81.1%00
7.2a.1029.36.6%01
7.229.34.0%00
7.1.31429.34.0%00
7.1.26629.34.0%00
7.168.04.6%01
7.068.04.6%01
6.436.65.5%01
6.346.76.3%02
6.246.76.3%02
6.136.65.5%01
6.036.65.5%01
5.836.65.5%01
5.736.65.5%01
5.636.65.5%01
5.536.65.5%01