vim-minimal (AlmaLinux:9) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the AlmaLinux:9 package vim-minimal, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (20)

• CVE-2026-34982 — CVSS 8.2 (high): Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command…
• CVE-2022-0554 — CVSS 7.8 (high): Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.
• CVE-2022-0943 — CVSS 7.8 (high): Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563.
• CVE-2022-1154 — CVSS 7.8 (high): Use after free in utf_ptr2char in GitHub repository vim/vim prior to 8.2.4646.
• CVE-2022-1621 — CVSS 7.8 (high): Heap buffer overflow in vim_strncpy find_word in GitHub repository vim/vim prior to 8.2.4919. This vulnerability is capable of crashing…
• CVE-2022-1629 — CVSS 7.8 (high): Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing…
• CVE-2022-1785 — CVSS 7.8 (high): Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.4977.
• CVE-2022-1897 — CVSS 7.8 (high): Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
• CVE-2022-1927 — CVSS 7.8 (high): Buffer Over-read in GitHub repository vim/vim prior to 8.2.
• CVE-2022-47024 — CVSS 7.8 (high): A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows…
• CVE-2023-4752 — CVSS 7.8 (high): Use After Free in GitHub repository vim/vim prior to 9.0.1858.
• CVE-2021-3903 — CVSS 7.8 (high): vim is vulnerable to Heap-based Buffer Overflow
• CVE-2026-25749 — CVSS 6.6 (medium): Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file…
• CVE-2026-33412 — CVSS 5.6 (medium): Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob()…
• CVE-2022-1420 — CVSS 5.5 (medium): Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774.
• CVE-2026-28421 — CVSS 5.3 (medium): Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault (SEGV)…
• CVE-2026-28417 — CVSS 4.4 (medium): Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the `netrw`…
• CVE-2026-35177 — CVSS 4.1 (medium): Vim is an open source, command line text editor. Prior to 9.2.0280, a path traversal bypass in Vim's zip.vim plugin allows overwriting of…
• CVE-2025-53906 — CVSS 4.1 (medium): Vim is an open source, command line text editor. Prior to version 9.1.1551, a path traversal issue in Vim’s zip.vim plugin can allow…
• CVE-2025-53905 — CVSS 4.1 (medium): Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in Vim’s tar.vim plugin can allow…