CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 12:10 UTC )
This week: 5,496 CVEs published, 359 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,496 Show in the list Critical, last 7 days 359 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product vim:vim . Show all products
87 CVEs, showing 1 to 50 Page 1 of 2 Next CVE Severity Title Published CVE-2021-3928 High 7.3 Use of Uninitialized Variable in vim/vim Assigned by @huntrdev
Nov 5, 2021 CVE-2021-3927 High 7.3 Heap-based Buffer Overflow in vim/vim Assigned by @huntrdev
Nov 5, 2021 CVE-2021-3974 High 7.3 Use After Free in vim/vim Assigned by @huntrdev
Nov 19, 2021 CVE-2021-3973 High 7.3 Heap-based Buffer Overflow in vim/vim Assigned by @huntrdev
Nov 19, 2021 CVE-2021-3968 High 8.0 Heap-based Buffer Overflow in vim/vim Assigned by @huntrdev
Nov 19, 2021 CVE-2021-4136 High 7.3 Heap-based Buffer Overflow in vim/vim Assigned by @huntrdev
Dec 19, 2021 CVE-2021-4166 High 7.1 Out-of-bounds Read in vim/vim Assigned by @huntrdev
Dec 25, 2021 CVE-2022-0213 Medium 6.8 Heap-based Buffer Overflow in vim/vim Assigned by @huntrdev
Jan 14, 2022 CVE-2022-0351 High 8.4 Access of Memory Location Before Start of Buffer in vim/vim Assigned by @huntrdev
Jan 25, 2022 CVE-2022-1616 High 7.3 Use after free in append_command in vim/vim Assigned by @huntrdev
May 7, 2022 CVE-2022-1620 Medium 6.6 NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in vim/vim Assigned by @huntrdev
May 8, 2022 CVE-2022-1619 Medium 6.1 Heap-based Buffer Overflow in function cmdline_erase_chars in vim/vim Assigned by @huntrdev
May 8, 2022 CVE-2022-1674 Medium 6.6 NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in vim/vim Assigned by @huntrdev
May 12, 2022 CVE-2022-2042 High 7.4 Use After Free in vim/vim Assigned by @huntrdev
Jun 10, 2022 CVE-2022-2126 High 7.8 Out-of-bounds Read in vim/vim Assigned by @huntrdev
Jun 19, 2022 CVE-2022-2125 High 7.8 Heap-based Buffer Overflow in vim/vim Assigned by @huntrdev
Jun 19, 2022 CVE-2022-2124 High 7.8 Buffer Over-read in vim/vim Assigned by @huntrdev
Jun 19, 2022 CVE-2022-2129 High 7.8 Out-of-bounds Write in vim/vim Assigned by @huntrdev
Jun 19, 2022 CVE-2022-2175 High 7.8 Buffer Over-read in vim/vim Assigned by @huntrdev
Jun 23, 2022 CVE-2022-2182 High 7.8 Heap-based Buffer Overflow in vim/vim Assigned by @huntrdev
Jun 23, 2022 CVE-2022-2183 High 7.8 Out-of-bounds Read in vim/vim Assigned by @huntrdev
Jun 23, 2022 CVE-2022-2206 High 7.8 Out-of-bounds Read in vim/vim Assigned by @huntrdev
Jun 26, 2022 CVE-2022-2207 High 7.8 Heap-based Buffer Overflow in vim/vim Assigned by @huntrdev
Jun 27, 2022 CVE-2022-2210 High 7.8 Out-of-bounds Write in vim/vim Assigned by @huntrdev
Jun 27, 2022 CVE-2022-2208 High 7.8 NULL Pointer Dereference in vim/vim Assigned by @huntrdev
Jun 27, 2022 CVE-2022-2257 High 7.8 Out-of-bounds Read in vim/vim Assigned by @huntrdev
Jun 30, 2022 CVE-2022-2287 High 8.0 Out-of-bounds Read in vim/vim Assigned by @huntrdev
Jul 2, 2022 CVE-2022-2286 High 7.8 Out-of-bounds Read in vim/vim Assigned by @huntrdev
Jul 2, 2022 CVE-2022-2284 High 7.8 Heap-based Buffer Overflow in vim/vim Assigned by @huntrdev
Jul 2, 2022 CVE-2022-2285 High 7.8 Integer Overflow or Wraparound in vim/vim Assigned by @huntrdev
Jul 2, 2022 CVE-2022-2304 High 7.8 Stack-based Buffer Overflow in vim/vim Assigned by @huntrdev
Jul 5, 2022 CVE-2022-2344 High 7.8 Heap-based Buffer Overflow in vim/vim Assigned by @huntrdev
Jul 8, 2022 CVE-2022-2343 High 7.8 Heap-based Buffer Overflow in vim/vim Assigned by @huntrdev
Jul 8, 2022 CVE-2022-2345 High 7.8 Use After Free in vim/vim Assigned by @huntrdev
Jul 8, 2022 CVE-2022-2522 High 7.8 Heap-based Buffer Overflow in vim/vim Assigned by @huntrdev
Jul 25, 2022 CVE-2022-2849 High 7.8 Heap-based Buffer Overflow in vim/vim Assigned by @huntrdev
Aug 17, 2022 CVE-2022-2845 High 7.8 Improper Validation of Specified Quantity in Input in vim/vim Assigned by @huntrdev
Aug 17, 2022 CVE-2022-2946 High 7.8 Use After Free in vim/vim Assigned by @huntrdev
Aug 23, 2022 CVE-2025-66476 High 7.8 Vim is an open source, command line text editor. Dec 2, 2025 CVE-2026-25749 Medium 6.6 Vim is an open source, command line text editor. Feb 6, 2026 CVE-2026-26269 High 7.5 Vim is an open source, command line text editor. Feb 13, 2026 CVE-2026-28417 High 7.8 Vim is an open source, command line text editor. Feb 27, 2026 CVE-2026-28418 Medium 5.5 Vim is an open source, command line text editor. Feb 27, 2026 CVE-2026-28419 Medium 6.6 Vim is an open source, command line text editor. Feb 27, 2026 CVE-2026-28420 Medium 4.4 Vim is an open source, command line text editor. Feb 27, 2026 CVE-2026-28421 High 7.8 Vim is an open source, command line text editor. Feb 27, 2026 CVE-2026-28422 Low 2.2 Vim is an open source, command line text editor. Feb 27, 2026 CVE-2026-32249 Medium 5.5 Vim is an open source, command line text editor. Mar 12, 2026 CVE-2026-33412 High 7.3 Vim is an open source, command line text editor. Mar 24, 2026 CVE-2026-34714 High 8.6 Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} injection occurs with tabpanel lacking P_MLE. Mar 30, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
