Open Source vim

Name: Open Source vim
Brand: Open Source

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical41high28medium1low

updated 2026-10-27

vulnerabilities (83)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-44656US	medium5.3	0.92% (60th)	Exploit	9.2.0435	2026-05-08	< 9.2.0435
CVE-2026-73072US	high7.3	0.11% (2nd)	Exploit	9.2.0846	2026-08-11	2 versions
CVE-2025-27423US	—	22.5% (98th)	—	9.1.1164	2025-03-03	< 9.1.1164
CVE-2021-4187US	high7.8	1.74% (78th)	—	8.2.3923	2021-12-29	< 8.2.3923
CVE-2021-4173US	high7.8	1.74% (78th)	—	8.2.3916	2021-12-27	< 8.2.3916
CVE-2022-0417US	high7.8	1.53% (75th)	—	8.2.4245	2022-02-01	< 8.2.4245
CVE-2022-1154US	high7.8	1.46% (73rd)	—	8.2.4646	2022-03-30	< 8.2.4646
CVE-2022-0393US	high7.1	1.39% (72nd)	—	8.2	2022-01-28	< 8.2
CVE-2026-28417US	high7.8	1.35% (71st)	—	9.2.0073	2026-02-27	< 9.2.0073
CVE-2022-1160US	high7.8	1.31% (71st)	—	8.2.4647	2022-03-30	2 versions
CVE-2023-5344US	high7.5	1.27% (70th)	—	9.0.1969	2023-10-02	< 9.0.1969
CVE-2026-33412US	high7.3	0.87% (59th)	—	9.2.0202	2026-03-24	< 9.2.0202
CVE-2026-42307US	—	0.77% (56th)	—	9.2.0383	2026-05-08	< 9.2.0383
CVE-2023-48237US	medium4.3	0.76% (55th)	—	9.0.2112	2023-11-16	< 9.0.2112
CVE-2023-48235US	medium4.3	0.76% (55th)	—	9.0.2112	2023-11-16	< 9.0.2112
CVE-2023-48234US	medium4.3	0.76% (55th)	—	9.0.2112	2023-11-16	< 9.0.2112
CVE-2023-48233US	medium4.3	0.76% (55th)	—	9.0.2112	2023-11-16	< 9.0.2112
CVE-2023-48236US	medium4.3	0.69% (53rd)	—	9.0.2112	2023-11-16	< 9.0.2112
CVE-2023-48232US	medium4.3	0.67% (52nd)	—	9.0.2112	2023-11-16	< 9.0.2112
CVE-2023-48231US	medium4.3	0.67% (52nd)	—	9.0.2112	2023-11-16	< 9.0.2112
CVE-2026-39881US	high7.8	0.62% (50th)	—	9.2.0316	2026-04-08	< 9.2.0316
CVE-2026-34714US	high8.6	0.60% (48th)	—	9.2.0172	2026-03-30	< 9.2.0172
CVE-2023-4735US	high7.8	0.59% (48th)	—	9.0.1847	2023-09-02	4 versions
CVE-2023-4781US	high7.8	0.57% (47th)	—	9.0.1873	2023-09-05	< 9.0.1873
CVE-2023-4752US	high7.8	0.56% (47th)	—	9.0.1684	2023-09-04	5 versions
CVE-2023-4751US	high7.8	0.56% (47th)	—	9.0.1331	2023-09-03	< 9.0.1331
CVE-2024-22667US	high7.8	0.56% (47th)	—	9.0.2142	2024-02-05	< 9.0.2142
CVE-2023-4738US	high7.8	0.56% (46th)	—	9.0.1848	2023-09-02	5 versions
CVE-2026-46483US	high7.0	0.55% (46th)	—	9.2.479	2026-05-15	< 9.2.479
CVE-2023-4734US	high7.8	0.55% (46th)	—	9.0.1331	2023-09-02	3 versions
CVE-2023-48706US	medium4.7	0.54% (45th)	—	9.0.2121	2023-11-22	< 9.0.2121
CVE-2023-4750US	high7.8	0.52% (44th)	—	9.0.1429	2023-09-04	4 versions
CVE-2023-4736US	high7.8	0.51% (44th)	—	9.0.1833	2023-09-02	2 versions
CVE-2023-4733US	high7.8	0.51% (43rd)	—	9.0.1840	2023-09-04	3 versions
CVE-2026-41411US	—	0.50% (43rd)	—	9.2.0357	2026-04-24	< 9.2.0357
CVE-2023-2609US	medium5.5	0.47% (41st)	—	9.0.1532	2023-05-09	< 9.0.1532
CVE-2023-2610US	high7.8	0.46% (39th)	—	9.0.1532	2023-05-09	< 9.0.1532
CVE-2025-66476US	—	0.45% (39th)	—	9.1.1947	2025-12-02	< 9.1.1947
CVE-2026-34982US	—	0.44% (38th)	—	9.2.0276	2026-04-06	< 9.2.0276
CVE-2025-29768US	medium4.4	0.39% (33rd)	—	9.1.1198	2025-03-13	< 9.1.1198
CVE-2024-41957US	medium5.3	0.37% (30th)	—	v9.1.0647	2024-08-01	< v9.1.0647
CVE-2024-43374US	medium4.7	0.35% (29th)	—	9.1.0678	2024-08-16	< 9.1.0678
CVE-2026-26269US	high7.5	0.34% (27th)	—	v9.1.2148	2026-02-13	< v9.1.2148
CVE-2024-41965US	medium4.2	0.33% (26th)	—	v9.1.0647	2024-08-01	2 versions
CVE-2026-73078US	high8.8	0.31% (24th)	—	9.2.0840	2026-08-11	2 versions
CVE-2026-52859US	high8.2	0.30% (23rd)	—	9.2.565	2026-06-11	< 9.2.565
CVE-2024-47814US	medium4.7	0.29% (22nd)	—	9.1.0764	2024-10-07	< 9.1.0764
CVE-2025-9390US	medium5.5	0.28% (21st)	—	9.1.1616	2025-08-24	< 9.1.1616
CVE-2026-47162US	high8.8	0.27% (20th)	—	9.2.0495	2026-06-11	< 9.2.0495
CVE-2026-28418US	medium5.5	0.26% (17th)	—	9.2.0074	2026-02-27	2 versions

showing 50 of 83

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-416Use After Free14 CVEs
CWE-787Out-of-bounds Write13 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')12 CVEs
CWE-122Heap-based Buffer Overflow11 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')10 CVEs
CWE-125Out-of-bounds Read9 CVEs
CWE-190Integer Overflow or Wraparound9 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer3 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)83 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan