vim vulnerabilities
- In CISA's KEV catalog
- 0 exploited vulnerabilities
- CVE records, last 3 years
- 71 since
Rank 230 of 467 vendors on this site - Critical or high
- 23.9% of 71 scored records; 0 not scored
Source: CISA KEV 2026.11.10, as of ; CVE List, as of . About the data.
- vim has 71 CVE records published between 12 Nov 2023 and 12 Nov 2026, ranking #230 of 467 vendors on this site by that count.
- Of the 71 with a CVSS score, 17 (23.9%) are rated critical or high; 0 (0% of all) have no CVSS score.
- None of the CVE records attributed to vim is listed in CISA's KEV catalog as of 12 Nov 2026.
CVE records per year, by severity
- Critical
- High
- Medium, low or none
- Not scored
* 2026 is counted through .
Show data as a table
| Year | Records | Critical | High | Critical or high | Not scored |
|---|---|---|---|---|---|
| 2026* | 46 | 1 | 14 | 32.6% | 0% |
| 2025 | 10 | 0 | 2 | 20% | 0% |
| 2024 | 7 | 0 | 0 | 0% | 0% |
| 2023 | 35 | 0 | 21 | 60% | 0% |
| 2022 | 113 | 0 | 82 | 73.2% | 0.9% |
| 2021 | 20 | 0 | 16 | 80% | 0% |
| 2020 | 0 | 0 | 0 | — | — |
| 2019 | 0 | 0 | 0 | — | — |
| 2018 | 0 | 0 | 0 | — | — |
| 2017 | 0 | 0 | 0 | — | — |
"Critical or high" is the share of scored records; "Not scored" is the share of all records.
Source: CVE List, as of . About the data.
Highest exploit-prediction scores (EPSS)
EPSS estimates the probability that a vulnerability is exploited in the next 30 days. The highest-scoring vim records today, from 1%.
- CVE-2022-0572
- CVE-2025-27423
- CVE-2022-0714
- CVE-2022-1381
- CVE-2022-1616
- CVE-2022-1619
- CVE-2022-1621
- CVE-2021-3968
- CVE-2022-1720
- CVE-2022-0318
Source: FIRST EPSS, as of ; CVE List, as of ; CISA KEV 2026.11.10, as of . About the data.