neovim has 12 CVEs on record between 2023 and 2024. The median CVSS is 7.8 (high). None have a confirmed exploitation report. The dominant weakness classes are CWE-416 (6) and CWE-122 (4).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.8
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Worst active — by depth score
CVE-2023-5535High· 7.8Use After Free in GitHub repository vim/vim prior to v9.0.2010.43CVE-2023-4781High· 7.8Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873.43CVE-2023-4752High· 7.8Use After Free in GitHub repository vim/vim prior to 9.0.1858.43CVE-2023-4750High· 7.8Use After Free in GitHub repository vim/vim prior to 9.0.1857.43CVE-2023-4733High· 7.8Use After Free in GitHub repository vim/vim prior to 9.0.1840.43
neovim vulnerabilities
CVEs affecting neovim, newest first. Open any entry for full detail, references, and exploit status.
12 CVEsRSS
CVE-2024-41965Medium· 4.2Vim is an open source command line text editor
Vim is an open source command line text editor. double-free in dialog_changed() in Vim < v9.1.0648. When abandoning a buffer, Vim may ask the user what to do with the modified buffer. If the user wants the changed buffer to be saved, Vim…
CVE-2023-48706Low· 3.6Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability
Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability. When executing a `:s` command for the very first time and using a sub-replace-special atom inside the substitution part, it is possible that t…
CVE-2023-5535High· 7.8⚖ disputedUse After Free in GitHub repository vim/vim prior to v9.0.2010.
Use After Free in GitHub repository vim/vim prior to v9.0.2010.
CVE-2023-4781High· 7.8Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873.
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873.
CVE-2023-4752High· 7.8Use After Free in GitHub repository vim/vim prior to 9.0.1858.
Use After Free in GitHub repository vim/vim prior to 9.0.1858.
CVE-2023-4750High· 7.8Use After Free in GitHub repository vim/vim prior to 9.0.1857.
Use After Free in GitHub repository vim/vim prior to 9.0.1857.
CVE-2023-4733High· 7.8Use After Free in GitHub repository vim/vim prior to 9.0.1840.
Use After Free in GitHub repository vim/vim prior to 9.0.1840.
CVE-2023-4751High· 7.8Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331.
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331.
CVE-2023-4738High· 7.8Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848.
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848.
CVE-2023-4734High· 7.8Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846.
Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846.
CVE-2023-1175Medium· 6.6Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378.
Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378.
CVE-2023-1170Medium· 6.6Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376.
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376.