vim (SUSE:Linux Enterprise Micro 5.2) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Micro 5.2 package vim, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (161)

• CVE-2022-3520 — CVSS 9.8 (critical): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765.
• CVE-2022-0318 — CVSS 9.8 (critical): Heap-based Buffer Overflow in vim/vim prior to 8.2.
• CVE-2026-34714 — CVSS 9.2 (critical): Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because…
• CVE-2025-55157 — CVSS 8.8 (high): Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1400, When processing nested tuples in Vim script…
• CVE-2025-55158 — CVSS 8.8 (high): Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1406, when processing nested tuples during Vim9…
• CVE-2026-34982 — CVSS 8.2 (high): Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command…
• CVE-2021-3968 — CVSS 8.0 (high): vim is vulnerable to Heap-based Buffer Overflow
• CVE-2021-3974 — CVSS 7.8 (high): vim is vulnerable to Use After Free
• CVE-2021-3984 — CVSS 7.8 (high): vim is vulnerable to Heap-based Buffer Overflow
• CVE-2021-4019 — CVSS 7.8 (high): vim is vulnerable to Heap-based Buffer Overflow
• CVE-2021-4069 — CVSS 7.8 (high): vim is vulnerable to Use After Free
• CVE-2021-4136 — CVSS 7.8 (high): vim is vulnerable to Heap-based Buffer Overflow
• CVE-2021-4192 — CVSS 7.8 (high): vim is vulnerable to Use After Free
• CVE-2022-0128 — CVSS 7.8 (high): vim is vulnerable to Out-of-bounds Read
• CVE-2022-0261 — CVSS 7.8 (high): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
• CVE-2023-4733 — CVSS 7.8 (high): Use After Free in GitHub repository vim/vim prior to 9.0.1840.
• CVE-2021-3778 — CVSS 7.8 (high): vim is vulnerable to Heap-based Buffer Overflow
• CVE-2021-3872 — CVSS 7.8 (high): vim is vulnerable to Heap-based Buffer Overflow
• CVE-2021-3903 — CVSS 7.8 (high): vim is vulnerable to Heap-based Buffer Overflow
• CVE-2021-3927 — CVSS 7.8 (high): vim is vulnerable to Heap-based Buffer Overflow
• CVE-2021-3928 — CVSS 7.8 (high): vim is vulnerable to Use of Uninitialized Variable
• CVE-2021-3973 — CVSS 7.8 (high): vim is vulnerable to Heap-based Buffer Overflow
• CVE-2022-2175 — CVSS 7.8 (high): Buffer Over-read in GitHub repository vim/vim prior to 8.2.
• CVE-2022-2182 — CVSS 7.8 (high): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
• CVE-2022-2183 — CVSS 7.8 (high): Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
• CVE-2022-2206 — CVSS 7.8 (high): Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
• CVE-2022-2207 — CVSS 7.8 (high): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
• CVE-2022-2210 — CVSS 7.8 (high): Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
• CVE-2022-2257 — CVSS 7.8 (high): Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.
• CVE-2022-2264 — CVSS 7.8 (high): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.
• CVE-2022-2284 — CVSS 7.8 (high): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.
• CVE-2022-2285 — CVSS 7.8 (high): Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.
• CVE-2022-2286 — CVSS 7.8 (high): Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.
• CVE-2022-2304 — CVSS 7.8 (high): Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.
• CVE-2022-2343 — CVSS 7.8 (high): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0044.
• CVE-2022-2344 — CVSS 7.8 (high): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0045.
• CVE-2022-2345 — CVSS 7.8 (high): Use After Free in GitHub repository vim/vim prior to 9.0.0046.
• CVE-2022-2522 — CVSS 7.8 (high): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0061.
• CVE-2022-2571 — CVSS 7.8 (high): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101.
• CVE-2022-2580 — CVSS 7.8 (high): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0102.
• CVE-2022-2581 — CVSS 7.8 (high): Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0104.
• CVE-2022-2816 — CVSS 7.8 (high): Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0212.
• CVE-2022-2817 — CVSS 7.8 (high): Use After Free in GitHub repository vim/vim prior to 9.0.0213.
• CVE-2022-2819 — CVSS 7.8 (high): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0211.
• CVE-2022-2845 — CVSS 7.8 (high): Improper Validation of Specified Quantity in Input in GitHub repository vim/vim prior to 9.0.0218.
• CVE-2022-2849 — CVSS 7.8 (high): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0220.
• CVE-2022-2862 — CVSS 7.8 (high): Use After Free in GitHub repository vim/vim prior to 9.0.0221.
• CVE-2022-2889 — CVSS 7.8 (high): Use After Free in GitHub repository vim/vim prior to 9.0.0225.
• CVE-2022-2946 — CVSS 7.8 (high): Use After Free in GitHub repository vim/vim prior to 9.0.0246.
• CVE-2022-2982 — CVSS 7.8 (high): Use After Free in GitHub repository vim/vim prior to 9.0.0260.
• CVE-2022-3016 — CVSS 7.8 (high): Use After Free in GitHub repository vim/vim prior to 9.0.0286.
• CVE-2022-3037 — CVSS 7.8 (high): Use After Free in GitHub repository vim/vim prior to 9.0.0322.
• CVE-2022-3099 — CVSS 7.8 (high): Use After Free in GitHub repository vim/vim prior to 9.0.0360.
• CVE-2022-3134 — CVSS 7.8 (high): Use After Free in GitHub repository vim/vim prior to 9.0.0389.
• CVE-2022-3234 — CVSS 7.8 (high): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0483.
• CVE-2022-3235 — CVSS 7.8 (high): Use After Free in GitHub repository vim/vim prior to 9.0.0490.
• CVE-2022-3296 — CVSS 7.8 (high): Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0577.
• CVE-2022-3297 — CVSS 7.8 (high): Use After Free in GitHub repository vim/vim prior to 9.0.0579.
• CVE-2022-3324 — CVSS 7.8 (high): Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598.
• CVE-2022-3352 — CVSS 7.8 (high): Use After Free in GitHub repository vim/vim prior to 9.0.0614.
• CVE-2022-3491 — CVSS 7.8 (high): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0742.
• CVE-2022-3591 — CVSS 7.8 (high): Use After Free in GitHub repository vim/vim prior to 9.0.0789.
• CVE-2022-4141 — CVSS 7.8 (high): Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the…
• CVE-2022-4292 — CVSS 7.8 (high): Use After Free in GitHub repository vim/vim prior to 9.0.0882.
• CVE-2023-0049 — CVSS 7.8 (high): Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
• CVE-2023-0051 — CVSS 7.8 (high): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
• CVE-2023-0054 — CVSS 7.8 (high): Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
• CVE-2023-0288 — CVSS 7.8 (high): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
• CVE-2023-0433 — CVSS 7.8 (high): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225.
• CVE-2023-0512 — CVSS 7.8 (high): Divide By Zero in GitHub repository vim/vim prior to 9.0.1247.
• CVE-2023-1127 — CVSS 7.8 (high): Divide By Zero in GitHub repository vim/vim prior to 9.0.1367.
• CVE-2023-2610 — CVSS 7.8 (high): Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1532.
• CVE-2023-4734 — CVSS 7.8 (high): Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846.
• CVE-2023-4735 — CVSS 7.8 (high): Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847.
• CVE-2023-4738 — CVSS 7.8 (high): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848.
• CVE-2023-4750 — CVSS 7.8 (high): Use After Free in GitHub repository vim/vim prior to 9.0.1857.
• CVE-2023-4752 — CVSS 7.8 (high): Use After Free in GitHub repository vim/vim prior to 9.0.1858.
• CVE-2023-4781 — CVSS 7.8 (high): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873.
• CVE-2023-5535 — CVSS 7.8 (high): Use After Free in GitHub repository vim/vim prior to v9.0.2010.
• CVE-2024-22667 — CVSS 7.8 (high): Vim before 9.0.2142 has a stack-based buffer overflow because did_set_langmap in map.c calls sprintf to write to the error buffer that is…
• CVE-2022-0351 — CVSS 7.8 (high): Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2.
• CVE-2022-0359 — CVSS 7.8 (high): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
• CVE-2022-0361 — CVSS 7.8 (high): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
• CVE-2022-0392 — CVSS 7.8 (high): Heap-based Buffer Overflow in GitHub repository vim prior to 8.2.
• CVE-2022-0407 — CVSS 7.8 (high): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
• CVE-2022-0413 — CVSS 7.8 (high): Use After Free in GitHub repository vim/vim prior to 8.2.
• CVE-2022-1381 — CVSS 7.8 (high): global heap buffer overflow in skip_range in GitHub repository vim/vim prior to 8.2.4763. This vulnerability is capable of crashing…
• CVE-2022-1616 — CVSS 7.8 (high): Use after free in append_command in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass…
• CVE-2022-1619 — CVSS 7.8 (high): Heap-based Buffer Overflow in function cmdline_erase_chars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable…
• CVE-2022-1720 — CVSS 7.8 (high): Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the…
• CVE-2022-1733 — CVSS 7.8 (high): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4968.
• CVE-2022-1735 — CVSS 7.8 (high): Classic Buffer Overflow in GitHub repository vim/vim prior to 8.2.4969.
• CVE-2022-1785 — CVSS 7.8 (high): Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.4977.
• CVE-2022-1796 — CVSS 7.8 (high): Use After Free in GitHub repository vim/vim prior to 8.2.4979.
• CVE-2022-1851 — CVSS 7.8 (high): Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
• CVE-2022-1897 — CVSS 7.8 (high): Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
• CVE-2022-1898 — CVSS 7.8 (high): Use After Free in GitHub repository vim/vim prior to 8.2.
• CVE-2022-1927 — CVSS 7.8 (high): Buffer Over-read in GitHub repository vim/vim prior to 8.2.
• CVE-2022-1968 — CVSS 7.8 (high): Use After Free in GitHub repository vim/vim prior to 8.2.
• CVE-2022-2124 — CVSS 7.8 (high): Buffer Over-read in GitHub repository vim/vim prior to 8.2.
• CVE-2022-2125 — CVSS 7.8 (high): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
• CVE-2022-2126 — CVSS 7.8 (high): Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
• CVE-2022-2129 — CVSS 7.8 (high): Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
• CVE-2022-1620 — CVSS 7.5 (high): NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in GitHub repository vim/vim prior to 8.2.4901. NULL Pointer…
• CVE-2023-5344 — CVSS 7.5 (high): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969.
• CVE-2021-3796 — CVSS 7.3 (high): vim is vulnerable to Use After Free
• CVE-2021-4166 — CVSS 7.1 (high): vim is vulnerable to Out-of-bounds Read
• CVE-2022-2287 — CVSS 7.1 (high): Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.
• CVE-2022-0213 — CVSS 6.6 (medium): vim is vulnerable to Heap-based Buffer Overflow
• CVE-2023-1175 — CVSS 6.6 (medium): Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378.
• CVE-2023-1170 — CVSS 6.6 (medium): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376.
• CVE-2022-2598 — CVSS 6.5 (medium): Out-of-bounds Write to API in GitHub repository vim/vim prior to 9.0.0100.
• CVE-2026-33412 — CVSS 5.6 (medium): Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob()…
• CVE-2022-3278 — CVSS 5.5 (medium): NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0552.
• CVE-2021-3875 — CVSS 5.5 (medium): vim is vulnerable to Heap-based Buffer Overflow
• CVE-2022-0319 — CVSS 5.5 (medium): Out-of-bounds Read in vim/vim prior to 8.2.
• CVE-2023-1355 — CVSS 5.5 (medium): NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1402.
• CVE-2023-1264 — CVSS 5.5 (medium): NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392.
• CVE-2022-2923 — CVSS 5.5 (medium): NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240.
• CVE-2022-2980 — CVSS 5.5 (medium): NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259.
• CVE-2022-0696 — CVSS 5.5 (medium): NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4428.
• CVE-2022-1420 — CVSS 5.5 (medium): Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774.
• CVE-2017-17087 — CVSS 5.5 (medium): fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group (which may be different from the…
• CVE-2022-3153 — CVSS 5.5 (medium): NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
• CVE-2022-1771 — CVSS 5.5 (medium): Uncontrolled Recursion in GitHub repository vim/vim prior to 8.2.4975.
• CVE-2023-5441 — CVSS 5.5 (medium): NULL Pointer Dereference in GitHub repository vim/vim prior to 20d161ace307e28690229b68584f2d84556f8960.
• CVE-2023-2609 — CVSS 5.5 (medium): NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1531.
• CVE-2022-4293 — CVSS 5.5 (medium): Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.
• CVE-2022-2874 — CVSS 5.5 (medium): NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0224.
• CVE-2023-2426 — CVSS 5.5 (medium): Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.
• CVE-2022-2208 — CVSS 5.5 (medium): NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.5163.
• CVE-2022-2231 — CVSS 5.5 (medium): NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.
• CVE-2021-4193 — CVSS 5.5 (medium): vim is vulnerable to Out-of-bounds Read
• CVE-2026-26269 — CVSS 5.4 (medium): Vim is an open source, command line text editor. Prior to 9.1.2148, a stack buffer overflow vulnerability exists in Vim's NetBeans…
• CVE-2026-28419 — CVSS 5.3 (medium): Vim is an open source, command line text editor. Prior to version 9.2.0075, a heap-based buffer underflow exists in Vim's Emacs-style tags…
• CVE-2026-28421 — CVSS 5.3 (medium): Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault (SEGV)…
• CVE-2022-3705 — CVSS 5.0 (medium): A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qf_update_buffer of the file…
• CVE-2024-43802 — CVSS 4.5 (medium): Vim is an improved version of the unix vi text editor. When flushing the typeahead buffer, Vim moves the current position in the typeahead…
• CVE-2024-43790 — CVSS 4.5 (medium): Vim is an open source command line text editor. When performing a search and displaying the search-count message is disabled (:set shm+=S)…
• CVE-2024-45306 — CVSS 4.5 (medium): Vim is an open source, command line text editor. Patch v9.1.0038 optimized how the cursor position is calculated and removed a loop, that…
• CVE-2026-28418 — CVSS 4.4 (medium): Vim is an open source, command line text editor. Prior to version 9.2.0074, a heap-based buffer overflow out-of-bounds read exists in Vim's…
• CVE-2025-29768 — CVSS 4.4 (medium): Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The…
• CVE-2026-28420 — CVSS 4.4 (medium): Vim is an open source, command line text editor. Prior to version 9.2.0076, a heap-based buffer overflow WRITE and an out-of-bounds READ…
• CVE-2026-28417 — CVSS 4.4 (medium): Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the `netrw`…
• CVE-2025-22134 — CVSS 4.2 (medium): When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because…
• CVE-2024-41965 — CVSS 4.2 (medium): Vim is an open source command line text editor. double-free in dialog_changed() in Vim < v9.1.0648. When abandoning a buffer, Vim may ask…
• CVE-2025-24014 — CVSS 4.2 (medium): Vim is an open source, command line text editor. A segmentation fault was found in Vim before 9.1.1043. In silent Ex mode (-s -e), Vim…
• CVE-2025-53905 — CVSS 4.1 (medium): Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in Vim’s tar.vim plugin can allow…
• CVE-2025-53906 — CVSS 4.1 (medium): Vim is an open source, command line text editor. Prior to version 9.1.1551, a path traversal issue in Vim’s zip.vim plugin can allow…
• CVE-2023-46246 — CVSS 4.0 (medium): Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function `ga_grow_inner` in in…
• CVE-2023-48231 — CVSS 3.9 (low): Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation…
• CVE-2023-48232 — CVSS 3.9 (low): Vim is an open source command line text editor. A floating point exception may occur when calculating the line offset for overlong lines…
• CVE-2023-48706 — CVSS 3.6 (low): Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability. When executing a `:s` command for the very…
• CVE-2023-48237 — CVSS 2.8 (low): Vim is an open source command line text editor. In affected versions when shifting lines in operator pending mode and using a very large…
• CVE-2023-48236 — CVSS 2.8 (low): Vim is an open source command line text editor. When using the z= command, the user may overflow the count with values larger than MAX_INT…
• CVE-2023-48235 — CVSS 2.8 (low): Vim is an open source command line text editor. When parsing relative ex addresses one may unintentionally cause an overflow. Ironically…
• CVE-2023-48233 — CVSS 2.8 (low): Vim is an open source command line text editor. If the count after the :s command is larger than what fits into a (signed) long variable…
• CVE-2023-48234 — CVSS 2.8 (low): Vim is an open source command line text editor. When getting the count for a normal mode z command, it may overflow for large counts given…
• CVE-2025-1215 — CVSS 2.8 (low): A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c…
• CVE-2026-28422 — CVSS 2.2 (low): Vim is an open source, command line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in `build_stl_str_hl()` when…
• CVE-2021-46059: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation…