目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1336 CNY

100%
コーヒーを一杯おごる

vim 厂商漏洞列表 / CVE 中文分析 229

vim 厂商相关 229 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Vim 是一款广泛使用的开源文本编辑器，核心用途为高效代码编写与文件处理。其历史漏洞多集中于缓冲区溢出及命令注入，部分严重缺陷可导致远程代码执行。尽管作为本地工具风险相对可控，但解析恶意构造文件时仍可能触发崩溃或任意代码执行。鉴于已收录两百余条 CVE，用户需保持版本更新，并警惕来自不可信来源的配置文件或脚本，以防范潜在的安全威胁。

上位製品 vim: vim/vim vim
CVE IDタイトルCVSS深刻度公開日
CVE-2026-73078 Vim: Arbitrary Code Execution via Netrw Menu Construction — vimCWE-77 8.6 High2026-08-11
CVE-2026-73077 Vim: Arbitrary Code Execution via Shell Keyword Lookup — vimCWE-78 8.4 High2026-08-11
CVE-2026-73076 Vim: Arbitrary Command Execution via Malicious `.VimballRecord` Entry Replay in `vimball.vim` — vimCWE-94 8.4 High2026-08-11
CVE-2026-73075 Vim: Out-of-bounds Access in Popup Opacity Handling — vimCWE-124 4.6 Medium2026-08-11
CVE-2026-73074 Vim: Heap Buffer Overflow in Text Property Handling — vimCWE-190 7.1 High2026-08-11
CVE-2026-73072 Vim: Heap Buffer Overflow when Loading a Spell File — vimCWE-122 8.5 High2026-08-11
CVE-2026-73071 Vim: Use-after-free in JSON Decoding — vimCWE-416 3.3 Low2026-08-11
CVE-2026-73070 Vim: Stack Buffer Overflow in the Vim Socket Server — vimCWE-121 6.8 Medium2026-08-11
CVE-2026-59856 Vim: Arbitrary Code Execution via PHP Omni-Completion — vimCWE-94--2026-07-09
CVE-2026-59858 Vim: Arbitrary Code Execution via C Omni-Completion — vimCWE-94--2026-07-09
CVE-2026-59857 Vim: Out-of-bounds Write in SAL Soundfolding — vimCWE-787--2026-07-09
CVE-2026-55693 Vim: Out-of-bounds Write in Spell File Word Count — vimCWE-787--2026-06-25
CVE-2026-55892 Vim: Out-of-bounds Write in Spell File Prefix Dump — vimCWE-787 5.5 Medium2026-06-25
CVE-2026-55895 Vim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filename — vimCWE-78--2026-06-25
CVE-2026-57451 Vim: Out-of-bounds Read in Text Property Count — vimCWE-125 5.3 Medium2026-06-25
CVE-2026-57452 Vim: Out-of-bounds Read with libsodium-encrypted Files — vimCWE-125 5.5 Medium2026-06-25
CVE-2026-57453 Vim: PowerShell Command Injection via Unescaped Filename in zip.vim Extraction — vimCWE-77 6.5 Medium2026-06-25
CVE-2026-57454 Vim: Out-of-bounds Read with Text Properties — vimCWE-125--2026-06-25
CVE-2026-57455 Vim: Stack out-of-bounds write in `spell_soundfold_sofo()` via an over-length `soundfold()` argument — vimCWE-787--2026-06-25
CVE-2026-57456 Vim: Arbitrary Code Execution via Python Omni-Completion Docstrings — vimCWE-94--2026-06-25
CVE-2026-52860 Vim: Arbitrary Code Execution via Python Omni-Completion — vimCWE-94--2026-06-11
CVE-2026-52859 Vim: Out-of-bounds Read in Terminal Screen Snapshot — vimCWE-125--2026-06-11
CVE-2026-52858 Vim: Arbitrary Code Execution via Python Omni-Completion — vimCWE-94--2026-06-11
CVE-2026-47162 Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name — vimCWE-74 7.3 High2026-06-11
CVE-2026-47167 Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex — vimCWE-94--2026-06-11
CVE-2026-46483 Vim: Command injection in tar#Vimuntar via missing shellescape {special} flag — vimCWE-78 3.6 Low2026-05-15
CVE-2026-45130 Vim: Heap Buffer Overflow in spell file loading — vimCWE-122 6.6 Medium2026-05-08
CVE-2026-44656 Vim: OS Command Injection via 'path' completion — vimCWE-78 7.8AIHighAI2026-05-08
CVE-2026-42307 Vim: OS Command Injection in netrw — vimCWE-78 4.4 Medium2026-05-08
CVE-2026-41411 Vim: Command injection via backtick expansion in tag filenames — vimCWE-78 6.6 Medium2026-04-24

本页汇总了 vim 厂商截至目前公开的全部 229 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。