Neovim

neovim

30 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVEs (30)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-3591 2Neovim Vim 2Neovim Vim Sep 24, 2026 Dec 2, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Use After Free in GitHub repository vim/vim prior to 9.0.0789.
CVE-2022-4141 4Debian FedoraprojectNeovim+1 more 4Debian Linux FedoraNeovim+1 more Sep 24, 2026 Nov 25, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command.
CVE-2022-3324 4Debian FedoraprojectNeovim+1 more 4Debian Linux FedoraNeovim+1 more Sep 24, 2026 Sep 27, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598.
CVE-2022-3297 3Fedoraproject NeovimVim 3Fedora NeovimVim Sep 24, 2026 Sep 25, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Use After Free in GitHub repository vim/vim prior to 9.0.0579.
CVE-2022-3296 3Fedoraproject NeovimVim 3Fedora NeovimVim Sep 24, 2026 Sep 25, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0577.
CVE-2022-3256 4Debian FedoraprojectNeovim+1 more 4Debian Linux FedoraNeovim+1 more Sep 24, 2026 Sep 22, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Use After Free in GitHub repository vim/vim prior to 9.0.0530.
CVE-2022-3134 3Debian NeovimVim 3Debian Linux NeovimVim Sep 24, 2026 Sep 6, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Use After Free in GitHub repository vim/vim prior to 9.0.0389.
CVE-2022-3037 3Fedoraproject NeovimVim 3Fedora NeovimVim Sep 24, 2026 Aug 30, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Use After Free in GitHub repository vim/vim prior to 9.0.0322.
CVE-2021-4019 4Debian FedoraprojectNeovim+1 more 4Debian Linux FedoraNeovim+1 more Jun 17, 2026 Dec 1, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 vim is vulnerable to Heap-based Buffer Overflow
CVE-2019-12735 2Neovim Vim 2Neovim Vim Jun 17, 2026 Jun 5, 2019 N/A· v4 8.6 HIGH· v3 9.3 HIGH· v2 getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by execute in Vim, and assert_fails or nvim_input...Show more getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by execute in Vim, and assert_fails or nvim_input in Neovim.Show less