CVE-2023-0288

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189...

CVE-2023-0054

Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145...

CVE-2023-0051

CVE-2023-0051 affects Vim in vim/vim prior to version 9.0.1144, caused by a heap-based buffer overflow in the Vim code path. Impact is high (possible crash or code execution depending on context as described across advisories). Affected products include Vim on various Linux distributions and plat...

CVE-2023-0054

Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145...

CVE-2023-0049

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143...

CVE-2022-4293

Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804...

CVE-2022-4293

CVE-2022-4293 affects Vim in versions prior to 9.0.0804. Root cause: a floating point comparison with an incorrect operator could allow a local attacker to crash the Vim process (DoS). Some sources indicate a PoC exists. The vulnerability impact is described as a local denial of service. Remediat...

CVE-2022-4293 Floating Point Comparison with Incorrect Operator in vim/vim

Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804...

CVE-2022-4293

Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804...

CVE-2022-4292 Use After Free in vim/vim

Use After Free in GitHub repository vim/vim prior to 9.0.0882...

CVE-2022-3591

Use After Free in GitHub repository vim/vim prior to 9.0.0789...

CVE-2022-3591

Use After Free in GitHub repository vim/vim prior to 9.0.0789...

CVE-2022-3591

Use After Free in GitHub repository vim/vim prior to 9.0.0789...

CVE-2022-3520

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765...

CVE-2022-3520

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765...

Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2022-155)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-155 advisory. A use-after-free vulnerability was found in vim's docmdline function of the src/exdocmd.c file. The issue triggers when an invalid line number on :for is ignored. This flaw allows an attacker t...

CVE-2022-3352

Use After Free in GitHub repository vim/vim prior to 9.0.0614...

CVE-2022-3352

Use After Free in GitHub repository vim/vim prior to 9.0.0614...

CVE-2022-1725

NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959...

CVE-2022-3297

Use After Free in GitHub repository vim/vim prior to 9.0.0579...