← Back

Neovim

neovim

Vendor: Neovim • 30 CVEs

CVEs (30)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Neovim
Vim
2Neovim
Vim
Sep 24, 2026
Dec 2, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Use After Free in GitHub repository vim/vim prior to 9.0.0789.
4Debian
FedoraprojectNeovim+1 more
4Debian Linux
FedoraNeovim+1 more
Sep 24, 2026
Nov 25, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command.
4Debian
FedoraprojectNeovim+1 more
4Debian Linux
FedoraNeovim+1 more
Sep 24, 2026
Sep 27, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598.
3Fedoraproject
NeovimVim
3Fedora
NeovimVim
Sep 24, 2026
Sep 25, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Use After Free in GitHub repository vim/vim prior to 9.0.0579.
3Fedoraproject
NeovimVim
3Fedora
NeovimVim
Sep 24, 2026
Sep 25, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0577.
4Debian
FedoraprojectNeovim+1 more
4Debian Linux
FedoraNeovim+1 more
Sep 24, 2026
Sep 22, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Use After Free in GitHub repository vim/vim prior to 9.0.0530.
3Debian
NeovimVim
3Debian Linux
NeovimVim
Sep 24, 2026
Sep 6, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Use After Free in GitHub repository vim/vim prior to 9.0.0389.
3Fedoraproject
NeovimVim
3Fedora
NeovimVim
Sep 24, 2026
Aug 30, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Use After Free in GitHub repository vim/vim prior to 9.0.0322.
4Debian
FedoraprojectNeovim+1 more
4Debian Linux
FedoraNeovim+1 more
Jun 17, 2026
Dec 1, 2021
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
vim is vulnerable to Heap-based Buffer Overflow
2Neovim
Vim
2Neovim
Vim
Jun 17, 2026
Jun 5, 2019
N/A· v4
8.6 HIGH· v3
9.3 HIGH· v2
getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by execute in Vim, and assert_fails or nvim_input...Show more
getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by execute in Vim, and assert_fails or nvim_input in Neovim.Show less