[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fK_EQ60OPk3D9W6uFq8lcSiiK07iyc50PL5vEwIPsfCc":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":42,"kevVulnerabilities":105,"topProductsByCves":106,"seoMetadata":112,"meta":121},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":41},33835,"vim",5,212,0,15081,"2025-08-24","v",[16,20,26,32,37],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":13},168201,15009,210,{"id":21,"product_name":22,"version_count":23,"cve_count":24,"kev_count":11,"last_cve_update":25},168198,"gvim",33,2,"2022-08-30",{"id":27,"product_name":28,"version_count":29,"cve_count":30,"kev_count":11,"last_cve_update":31},168199,"netrw",15,1,"2008-10-22",{"id":33,"product_name":34,"version_count":35,"cve_count":30,"kev_count":11,"last_cve_update":36},168200,"tar.vim",13,"2009-02-21",{"id":38,"product_name":39,"version_count":40,"cve_count":30,"kev_count":11,"last_cve_update":36},168202,"zipplugin.vim",11,"Vim is a technology vendor with 5 tracked products and 212 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[43,52,58,64,70,78,85,90,95,99],{"cveId":44,"description":45,"publishedDate":46,"cvssScore":47,"cvssVersion":48,"severity":49,"isKev":50,"epssScore":51},"CVE-2022-0572","Heap-based Buffer Overflow in GitHub repository vim\u002Fvim prior to 8.2.","2022-02-14",7.8,"v3.1","High",false,0.26474,{"cveId":53,"description":54,"publishedDate":55,"cvssScore":47,"cvssVersion":56,"severity":49,"isKev":50,"epssScore":57},"CVE-2016-1248","vim before patch 8.0.0056 does not properly validate values for the 'filetype', 'syntax' and 'keymap' options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened.","2016-11-23","v3.0",0.25314,{"cveId":59,"description":60,"publishedDate":61,"cvssScore":62,"cvssVersion":48,"severity":49,"isKev":50,"epssScore":63},"CVE-2025-27423","Vim is an open source, command line text editor. Vim is distributed with the tar.vim plugin, that allows easy editing and viewing of (compressed or uncompressed) tar files. Starting with 9.1.0858, the tar.vim plugin uses the \":read\" ex command line to append below the cursor position, however the is not sanitized and is taken literally from the tar archive. This allows to execute shell commands via special crafted tar archives. Whether this really happens, depends on the shell being used ('shell' option, which is set using $SHELL). The issue has been fixed as of Vim patch v9.1.1164","2025-03-03",7.1,0.22474,{"cveId":65,"description":66,"publishedDate":67,"cvssScore":68,"cvssVersion":56,"severity":49,"isKev":50,"epssScore":69},"CVE-2019-12735","getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by execute in Vim, and assert_fails or nvim_input in Neovim.","2019-06-05",8.6,0.18964,{"cveId":71,"description":72,"publishedDate":73,"cvssScore":74,"cvssVersion":75,"severity":76,"isKev":50,"epssScore":77},"CVE-2008-2712","Vim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary commands via Vim scripts that do not properly sanitize inputs before invoking the execute or system functions, as demonstrated using (1) filetype.vim, (3) xpm.vim, (4) gzip_vim, and (5) netrw.  NOTE: the originally reported version was 7.1.314, but the researcher actually found this set of issues in 7.1.298.  NOTE: the zipplugin issue (originally vector 2 in this identifier) has been subsumed by CVE-2008-3075.","2008-06-16",9.3,"v2","Critical",0.15044,{"cveId":79,"description":80,"publishedDate":81,"cvssScore":82,"cvssVersion":48,"severity":83,"isKev":50,"epssScore":84},"CVE-2022-0714","Heap-based Buffer Overflow in GitHub repository vim\u002Fvim prior to 8.2.4436.","2022-02-22",5.5,"Medium",0.12712,{"cveId":86,"description":87,"publishedDate":88,"cvssScore":74,"cvssVersion":75,"severity":76,"isKev":50,"epssScore":89},"CVE-2008-4101","Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to (1) execute arbitrary shell commands by entering a K keystroke on a line that contains a \";\" (semicolon) followed by a command, or execute arbitrary Ex commands by entering an argument after a (2) \"Ctrl-]\" (control close-square-bracket) or (3) \"g]\" (g close-square-bracket) keystroke sequence, a different issue than CVE-2008-2712.","2008-09-18",0.09207,{"cveId":91,"description":92,"publishedDate":93,"cvssScore":74,"cvssVersion":75,"severity":76,"isKev":50,"epssScore":94},"CVE-2010-3914","Untrusted search path vulnerability in VIM Development Group GVim before 7.3.034, and possibly other versions before 7.3.46, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse User32.dll or other DLL that is located in the same folder as a .TXT file.  NOTE: some of these details are obtained from third party information.","2010-11-03",0.0909,{"cveId":96,"description":97,"publishedDate":36,"cvssScore":74,"cvssVersion":75,"severity":76,"isKev":50,"epssScore":98},"CVE-2008-3076","The Netrw plugin 125 in netrw.vim in Vim 7.2a.10 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames used by the execute and system functions within the (1) mz and (2) mc commands, as demonstrated by the netrw.v2 and netrw.v3 test cases.  NOTE: this issue reportedly exists because of an incomplete fix for CVE-2008-2712.",0.09023,{"cveId":100,"description":101,"publishedDate":102,"cvssScore":103,"cvssVersion":75,"severity":83,"isKev":50,"epssScore":104},"CVE-2008-3432","Heap-based buffer overflow in the mch_expand_wildcards function in os_unix.c in Vim 6.2 and 6.3 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames, as demonstrated by the netrw.v3 test case.","2008-10-10",6.8,0.0862,[],[107,108,109,110,111],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":13},{"id":21,"product_name":22,"version_count":23,"cve_count":24,"kev_count":11,"last_cve_update":25},{"id":27,"product_name":28,"version_count":29,"cve_count":30,"kev_count":11,"last_cve_update":31},{"id":33,"product_name":34,"version_count":35,"cve_count":30,"kev_count":11,"last_cve_update":36},{"id":38,"product_name":39,"version_count":40,"cve_count":30,"kev_count":11,"last_cve_update":36},{"title":113,"metaDescription":114,"keywords":115,"structuredData":116},"Vim - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Vim covering 5 products with 212 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Vim vulnerabilities, Vim security, Vim CVE, Vim threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":117,"@type":118,"name":119,"description":114,"url":120},"https:\u002F\u002Fschema.org","Organization","Vim","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fvim",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":122,"apiVersion":123},"2026-10-19T20:08:36.052Z","3.0"]