Information on source package vim

Available versions

Release	Version
bullseye	2:8.2.2434-3+deb11u1
bullseye (security)	2:8.2.2434-3+deb11u3
bookworm	2:9.0.1378-2+deb12u2
trixie	2:9.1.1230-1
sid	2:9.1.1230-1

Open issues

Bug	bullseye	bookworm	trixie	sid	Description
CVE-2025-29768	fixed	vulnerable (no DSA)	fixed	fixed	Vim, a text editor, is vulnerable to potential data loss with zip.vim ...

Open unimportant issues

Bug	bullseye	bookworm	trixie	sid	Description
CVE-2025-26603	vulnerable	vulnerable	fixed	fixed	Vim is a greatly improved version of the good old UNIX editor Vi. Vim ...
CVE-2025-24014	vulnerable	vulnerable	fixed	fixed	Vim is an open source, command line text editor. A segmentation fault ...
CVE-2025-22134	vulnerable	vulnerable	fixed	fixed	When switching to other buffers using the :all command and visual mode ...
CVE-2025-1215	vulnerable	vulnerable	fixed	fixed	A vulnerability classified as problematic was found in vim up to 9.1.1 ...
CVE-2024-43790	vulnerable	vulnerable	fixed	fixed	Vim is an open source command line text editor. When performing a sear ...
CVE-2024-43374	vulnerable	vulnerable	fixed	fixed	The UNIX editor Vim prior to version 9.1.0678 has a use-after-free err ...
CVE-2024-41965	vulnerable	vulnerable	fixed	fixed	Vim is an open source command line text editor. double-free in dialog_ ...
CVE-2024-41957	vulnerable	vulnerable	fixed	fixed	Vim is an open source command line text editor. Vim < v9.1.0647 has do ...
CVE-2023-48706	vulnerable	vulnerable	fixed	fixed	Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-a ...
CVE-2023-48237	vulnerable	vulnerable	fixed	fixed	Vim is an open source command line text editor. In affected versions w ...
CVE-2023-48236	vulnerable	vulnerable	fixed	fixed	Vim is an open source command line text editor. When using the z= comm ...
CVE-2023-48235	vulnerable	vulnerable	fixed	fixed	Vim is an open source command line text editor. When parsing relative ...
CVE-2023-48234	vulnerable	vulnerable	fixed	fixed	Vim is an open source command line text editor. When getting the count ...
CVE-2023-48233	vulnerable	vulnerable	fixed	fixed	Vim is an open source command line text editor. If the count after the ...
CVE-2023-48232	vulnerable	vulnerable	fixed	fixed	Vim is an open source command line text editor. A floating point excep ...
CVE-2023-48231	vulnerable	vulnerable	fixed	fixed	Vim is an open source command line text editor. When closing a window, ...
CVE-2023-46246	vulnerable	vulnerable	fixed	fixed	Vim is an improved version of the good old UNIX editor Vi. Heap-use-af ...
CVE-2023-5535	vulnerable	vulnerable	fixed	fixed	Use After Free in GitHub repository vim/vim prior to v9.0.2010.
CVE-2023-5441	vulnerable	vulnerable	fixed	fixed	NULL Pointer Dereference in GitHub repository vim/vim prior to 20d161a ...
CVE-2023-4751	vulnerable	vulnerable	fixed	fixed	Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1 ...
CVE-2023-4750	vulnerable	vulnerable	fixed	fixed	Use After Free in GitHub repository vim/vim prior to 9.0.1857.
CVE-2023-4735	vulnerable	vulnerable	fixed	fixed	Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847.
CVE-2023-4734	vulnerable	vulnerable	fixed	fixed	Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9 ...
CVE-2023-4733	vulnerable	vulnerable	fixed	fixed	Use After Free in GitHub repository vim/vim prior to 9.0.1840.
CVE-2023-3896	vulnerable	vulnerable	fixed	fixed	Divide By Zero in vim/vim from9.0.1367-1 to9.0.1367-3
CVE-2023-2609	vulnerable	vulnerable	fixed	fixed	NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.153 ...
CVE-2023-1355	vulnerable	vulnerable	fixed	fixed	NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.140 ...
CVE-2023-1264	vulnerable	vulnerable	fixed	fixed	NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.139 ...
CVE-2023-1170	vulnerable	fixed	fixed	fixed	Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1 ...
CVE-2023-0512	vulnerable	fixed	fixed	fixed	Divide By Zero in GitHub repository vim/vim prior to 9.0.1247.
CVE-2023-0433	vulnerable	fixed	fixed	fixed	Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1 ...
CVE-2023-0288	vulnerable	fixed	fixed	fixed	Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1 ...
CVE-2023-0051	vulnerable	fixed	fixed	fixed	Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1 ...
CVE-2023-0049	vulnerable	fixed	fixed	fixed	Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
CVE-2022-47024	vulnerable	fixed	fixed	fixed	A null pointer dereference issue was discovered in function gui_x11_cr ...
CVE-2022-4293	vulnerable	fixed	fixed	fixed	Floating Point Comparison with Incorrect Operator in GitHub repository ...
CVE-2022-4292	vulnerable	fixed	fixed	fixed	Use After Free in GitHub repository vim/vim prior to 9.0.0882.
CVE-2022-3705	vulnerable	fixed	fixed	fixed	A vulnerability was found in vim and classified as problematic. Affect ...
CVE-2022-3591	vulnerable	fixed	fixed	fixed	Use After Free in GitHub repository vim/vim prior to 9.0.0789.
CVE-2022-3520	vulnerable	fixed	fixed	fixed	Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0 ...
CVE-2022-3491	vulnerable	fixed	fixed	fixed	Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0 ...
CVE-2022-3352	vulnerable	fixed	fixed	fixed	Use After Free in GitHub repository vim/vim prior to 9.0.0614.
CVE-2022-3297	vulnerable	fixed	fixed	fixed	Use After Free in GitHub repository vim/vim prior to 9.0.0579.
CVE-2022-3296	vulnerable	fixed	fixed	fixed	Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0. ...
CVE-2022-3278	vulnerable	fixed	fixed	fixed	NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.055 ...
CVE-2022-3256	vulnerable	fixed	fixed	fixed	Use After Free in GitHub repository vim/vim prior to 9.0.0530.
CVE-2022-3235	vulnerable	fixed	fixed	fixed	Use After Free in GitHub repository vim/vim prior to 9.0.0490.
CVE-2022-3234	vulnerable	fixed	fixed	fixed	Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0 ...
CVE-2022-3153	vulnerable	fixed	fixed	fixed	NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.040 ...
CVE-2022-3037	vulnerable	fixed	fixed	fixed	Use After Free in GitHub repository vim/vim prior to 9.0.0322.
CVE-2022-3016	vulnerable	fixed	fixed	fixed	Use After Free in GitHub repository vim/vim prior to 9.0.0286.
CVE-2022-2982	vulnerable	fixed	fixed	fixed	Use After Free in GitHub repository vim/vim prior to 9.0.0260.
CVE-2022-2980	vulnerable	fixed	fixed	fixed	NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.025 ...
CVE-2022-2946	vulnerable	fixed	fixed	fixed	Use After Free in GitHub repository vim/vim prior to 9.0.0246.
CVE-2022-2923	vulnerable	fixed	fixed	fixed	NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.024 ...
CVE-2022-2889	vulnerable	fixed	fixed	fixed	Use After Free in GitHub repository vim/vim prior to 9.0.0225.
CVE-2022-2874	vulnerable	fixed	fixed	fixed	NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.022 ...
CVE-2022-2862	vulnerable	fixed	fixed	fixed	Use After Free in GitHub repository vim/vim prior to 9.0.0221.
CVE-2022-2849	vulnerable	fixed	fixed	fixed	Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0 ...
CVE-2022-2845	vulnerable	fixed	fixed	fixed	Improper Validation of Specified Quantity in Input in GitHub repositor ...
CVE-2022-2819	vulnerable	fixed	fixed	fixed	Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0 ...
CVE-2022-2817	vulnerable	fixed	fixed	fixed	Use After Free in GitHub repository vim/vim prior to 9.0.0213.
CVE-2022-2816	vulnerable	fixed	fixed	fixed	Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0212.
CVE-2022-2598	vulnerable	fixed	fixed	fixed	Out-of-bounds Write to API in GitHub repository vim/vim prior to 9.0.0 ...
CVE-2022-2581	vulnerable	fixed	fixed	fixed	Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0104.
CVE-2022-2571	vulnerable	fixed	fixed	fixed	Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0 ...
CVE-2022-2522	vulnerable	fixed	fixed	fixed	Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0 ...
CVE-2022-2345	vulnerable	fixed	fixed	fixed	Use After Free in GitHub repository vim/vim prior to 9.0.0046.
CVE-2022-2344	vulnerable	fixed	fixed	fixed	Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0 ...
CVE-2022-2343	vulnerable	fixed	fixed	fixed	Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0 ...
CVE-2022-2289	vulnerable	fixed	fixed	fixed	Use After Free in GitHub repository vim/vim prior to 9.0.
CVE-2022-2287	vulnerable	fixed	fixed	fixed	Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.
CVE-2022-2286	vulnerable	fixed	fixed	fixed	Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.
CVE-2022-2285	vulnerable	fixed	fixed	fixed	Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9 ...
CVE-2022-2284	vulnerable	fixed	fixed	fixed	Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.
CVE-2022-2264	vulnerable	fixed	fixed	fixed	Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.
CVE-2022-2257	vulnerable	fixed	fixed	fixed	Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.
CVE-2022-2231	vulnerable	fixed	fixed	fixed	NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.
CVE-2022-2210	vulnerable	fixed	fixed	fixed	Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
CVE-2022-2208	vulnerable	fixed	fixed	fixed	NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.516 ...
CVE-2022-2207	vulnerable	fixed	fixed	fixed	Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2022-2206	vulnerable	fixed	fixed	fixed	Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
CVE-2022-2183	vulnerable	fixed	fixed	fixed	Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
CVE-2022-2182	vulnerable	fixed	fixed	fixed	Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2022-2175	vulnerable	fixed	fixed	fixed	Buffer Over-read in GitHub repository vim/vim prior to 8.2.
CVE-2022-2126	vulnerable	fixed	fixed	fixed	Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
CVE-2022-2125	vulnerable	fixed	fixed	fixed	Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2022-2124	vulnerable	fixed	fixed	fixed	Buffer Over-read in GitHub repository vim/vim prior to 8.2.
CVE-2022-2042	vulnerable	fixed	fixed	fixed	Use After Free in GitHub repository vim/vim prior to 8.2.
CVE-2022-1968	vulnerable	fixed	fixed	fixed	Use After Free in GitHub repository vim/vim prior to 8.2.
CVE-2022-1927	vulnerable	fixed	fixed	fixed	Buffer Over-read in GitHub repository vim/vim prior to 8.2.
CVE-2022-1898	vulnerable	fixed	fixed	fixed	Use After Free in GitHub repository vim/vim prior to 8.2.
CVE-2022-1886	vulnerable	fixed	fixed	fixed	Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2022-1851	vulnerable	fixed	fixed	fixed	Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
CVE-2022-1796	vulnerable	fixed	fixed	fixed	Use After Free in GitHub repository vim/vim prior to 8.2.4979.
CVE-2022-1771	vulnerable	fixed	fixed	fixed	Uncontrolled Recursion in GitHub repository vim/vim prior to 8.2.4975.
CVE-2022-1769	vulnerable	fixed	fixed	fixed	Buffer Over-read in GitHub repository vim/vim prior to 8.2.4974.
CVE-2022-1735	vulnerable	fixed	fixed	fixed	Classic Buffer Overflow in GitHub repository vim/vim prior to 8.2.4969 ...
CVE-2022-1733	vulnerable	fixed	fixed	fixed	Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4 ...
CVE-2022-1725	vulnerable	fixed	fixed	fixed	NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.495 ...
CVE-2022-1720	vulnerable	fixed	fixed	fixed	Buffer Over-read in function grab_file_name in GitHub repository vim/v ...
CVE-2022-1674	vulnerable	fixed	fixed	fixed	NULL Pointer Dereference in function vim_regexec_string at regexp.c:27 ...
CVE-2022-1629	vulnerable	fixed	fixed	fixed	Buffer Over-read in function find_next_quote in GitHub repository vim/ ...
CVE-2022-1621	vulnerable	fixed	fixed	fixed	Heap buffer overflow in vim_strncpy find_word in GitHub repository vim ...
CVE-2022-1620	vulnerable	fixed	fixed	fixed	NULL Pointer Dereference in function vim_regexec_string at regexp.c:27 ...
CVE-2022-1619	vulnerable	fixed	fixed	fixed	Heap-based Buffer Overflow in function cmdline_erase_chars in GitHub r ...
CVE-2022-1420	vulnerable	fixed	fixed	fixed	Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior ...
CVE-2022-1154	vulnerable	fixed	fixed	fixed	Use after free in utf_ptr2char in GitHub repository vim/vim prior to 8 ...
CVE-2022-0943	vulnerable	fixed	fixed	fixed	Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim ...
CVE-2022-0729	vulnerable	fixed	fixed	fixed	Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior ...
CVE-2022-0714	vulnerable	fixed	fixed	fixed	Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4 ...
CVE-2022-0696	vulnerable	fixed	fixed	fixed	NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.442 ...
CVE-2022-0685	vulnerable	fixed	fixed	fixed	Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior ...
CVE-2022-0629	vulnerable	fixed	fixed	fixed	Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2022-0554	vulnerable	fixed	fixed	fixed	Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior ...
CVE-2022-0443	vulnerable	fixed	fixed	fixed	Use After Free in GitHub repository vim/vim prior to 8.2.
CVE-2022-0413	vulnerable	fixed	fixed	fixed	Use After Free in GitHub repository vim/vim prior to 8.2.
CVE-2022-0408	vulnerable	fixed	fixed	fixed	Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2022-0407	vulnerable	fixed	fixed	fixed	Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2022-0393	vulnerable	fixed	fixed	fixed	Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
CVE-2022-0368	vulnerable	fixed	fixed	fixed	Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
CVE-2022-0319	vulnerable	fixed	fixed	fixed	Out-of-bounds Read in vim/vim prior to 8.2.
CVE-2022-0318	vulnerable	fixed	fixed	fixed	Heap-based Buffer Overflow in vim/vim prior to 8.2.
CVE-2022-0213	vulnerable	fixed	fixed	fixed	vim is vulnerable to Heap-based Buffer Overflow
CVE-2022-0158	vulnerable	fixed	fixed	fixed	vim is vulnerable to Heap-based Buffer Overflow
CVE-2022-0156	vulnerable	fixed	fixed	fixed	vim is vulnerable to Use After Free
CVE-2021-4193	vulnerable	fixed	fixed	fixed	vim is vulnerable to Out-of-bounds Read
CVE-2021-4192	vulnerable	fixed	fixed	fixed	vim is vulnerable to Use After Free
CVE-2021-4166	vulnerable	fixed	fixed	fixed	vim is vulnerable to Out-of-bounds Read
CVE-2021-4136	vulnerable	fixed	fixed	fixed	vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-4069	vulnerable	fixed	fixed	fixed	vim is vulnerable to Use After Free
CVE-2021-3984	vulnerable	fixed	fixed	fixed	vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-3974	vulnerable	fixed	fixed	fixed	vim is vulnerable to Use After Free
CVE-2021-3973	vulnerable	fixed	fixed	fixed	vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-3968	vulnerable	fixed	fixed	fixed	vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-3928	vulnerable	fixed	fixed	fixed	vim is vulnerable to Use of Uninitialized Variable
CVE-2021-3927	vulnerable	fixed	fixed	fixed	vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-3903	vulnerable	fixed	fixed	fixed	vim is vulnerable to Heap-based Buffer Overflow
CVE-2017-1000382	vulnerable	vulnerable	vulnerable	vulnerable	VIM version 8.0.1187 (and other versions most likely) ignores umask wh ...
CVE-2008-4677	vulnerable	vulnerable	vulnerable	vulnerable	autoload/netrw.vim (aka the Netrw Plugin) 109, 131, and other versions ...

Resolved issues

Bug	Description
CVE-2025-27423	Vim is an open source, command line text editor. Vim is distributed wi ...
CVE-2024-47814	Vim is an open source, command line text editor. A use-after-free was ...
CVE-2024-45306	Vim is an open source, command line text editor. Patch v9.1.0038 optim ...
CVE-2024-43802	Vim is an improved version of the unix vi text editor. When flushing t ...
CVE-2024-22667	Vim before 9.0.2142 has a stack-based buffer overflow because did_set_ ...
CVE-2023-5344	Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1 ...
CVE-2023-4781	Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1 ...
CVE-2023-4752	Use After Free in GitHub repository vim/vim prior to 9.0.1858.
CVE-2023-4738	Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1 ...
CVE-2023-4736	Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833.
CVE-2023-2610	Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9 ...
CVE-2023-2426	Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior ...
CVE-2023-1175	Incorrect Calculation of Buffer Size in GitHub repository vim/vim prio ...
CVE-2023-1127	Divide By Zero in GitHub repository vim/vim prior to 9.0.1367.
CVE-2023-0054	Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
CVE-2022-4141	Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing a ...
CVE-2022-3324	Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0. ...
CVE-2022-3134	Use After Free in GitHub repository vim/vim prior to 9.0.0389.
CVE-2022-3099	Use After Free in GitHub repository vim/vim prior to 9.0.0360.
CVE-2022-2580	Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0 ...
CVE-2022-2304	Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.
CVE-2022-2288	Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.
CVE-2022-2129	Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
CVE-2022-2000	Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
CVE-2022-1942	Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2022-1897	Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
CVE-2022-1785	Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.4977.
CVE-2022-1616	Use after free in append_command in GitHub repository vim/vim prior to ...
CVE-2022-1381	global heap buffer overflow in skip_range in GitHub repository vim/vim ...
CVE-2022-1160	heap buffer overflow in get_one_sourceline in GitHub repository vim/vi ...
CVE-2022-0572	Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2022-0417	Heap-based Buffer Overflow GitHub repository vim/vim prior to 8.2.
CVE-2022-0392	Heap-based Buffer Overflow in GitHub repository vim prior to 8.2.
CVE-2022-0361	Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2022-0359	Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2022-0351	Access of Memory Location Before Start of Buffer in GitHub repository ...
CVE-2022-0261	Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2022-0128	vim is vulnerable to Out-of-bounds Read
CVE-2021-4187	vim is vulnerable to Use After Free
CVE-2021-4173	vim is vulnerable to Use After Free
CVE-2021-4019	vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-3875	vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-3872	vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-3796	vim is vulnerable to Use After Free
CVE-2021-3778	vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-3770	vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-3236	vim 8.2.2348 is affected by null pointer dereference, allows local att ...
CVE-2020-20703	Buffer Overflow vulnerability in VIM v.8.1.2135 allows a remote attack ...
CVE-2019-20807	In Vim before 8.1.0881, users can circumvent the rvim restricted mode ...
CVE-2019-20079	The autocmd feature in window.c in Vim before 8.1.2136 accesses freed ...
CVE-2019-12735	getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote ...
CVE-2018-20786	libvterm through 0+bzr726, as used in Vim and other products, mishandl ...
CVE-2017-17087	fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp f ...
CVE-2017-11109	Vim 8.0 allows attackers to cause a denial of service (invalid free) o ...
CVE-2017-6350	An integer overflow at an unserialize_uep memory allocation site would ...
CVE-2017-6349	An integer overflow at a u_read_undo memory allocation site would occu ...
CVE-2017-5953	vim before patch 8.0.0322 does not properly validate values for tree l ...
CVE-2016-1248	vim before patch 8.0.0056 does not properly validate values for the 'f ...
CVE-2010-3914	Untrusted search path vulnerability in VIM Development Group GVim befo ...
CVE-2009-0316	Untrusted search path vulnerability in src/if_python.c in the Python i ...
CVE-2008-6235	The Netrw plugin (netrw.vim) in Vim 7.0 and 7.1 allows user-assisted a ...
CVE-2008-4101	Vim 3.0 through 7.x before 7.2.010 does not properly escape characters ...
CVE-2008-3432	Heap-based buffer overflow in the mch_expand_wildcards function in os_ ...
CVE-2008-3294	src/configure.in in Vim 5.0 through 7.1, when used for a build with Py ...
CVE-2008-3076	The Netrw plugin 125 in netrw.vim in Vim 7.2a.10 allows user-assisted ...
CVE-2008-3075	The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, al ...
CVE-2008-3074	The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, al ...
CVE-2008-2712	Vim 7.1.314, 6.4, and other versions allows user-assisted remote attac ...
CVE-2007-2953	Format string vulnerability in the helptags_one function in src/ex_cmd ...
CVE-2007-2438	The sandbox for vim allows dangerous functions such as (1) writefile, ...
CVE-2005-2368	vim 6.3 before 6.3.082, with modelines enabled, allows external user-a ...
CVE-2005-0069	The (1) tcltags or (2) vimspell.sh scripts in vim 6.3 allow local user ...
CVE-2004-1138	VIM before 6.3 and gVim before 6.3 allow local users to execute arbitr ...
CVE-2002-1377	vim 6.0 and 6.1, and possibly other versions, allows attackers to exec ...

Security announcements

DSA / DLA	Description
DLA-4097-1	vim - security update
DLA-3588-1	vim - security update
DLA-3453-1	vim - security update
DLA-3204-1	vim - security update
DLA-3182-1	vim - security update
DLA-3053-1	vim - security update
DLA-3011-1	vim - security update
DLA-2947-1	vim - security update
DLA-2876-1	vim - security update
DLA-1871-1	vim - security update
DSA-4467-2	vim - regression update
DSA-4467-1	vim - security update
DLA-1030-1	vim - security update
DLA-850-1	vim - security update
DSA-3786-1	vim - security update
DLA-822-1	vim - security update
DSA-3722-1	vim - security update
DLA-718-1	vim - security update
DSA-1733-1	vim - multiple vulnerabilities
DSA-1364-2	vim - several vulnerabilities
DSA-1364-1	vim