Maple Labs

Maple Labs · CVE search

Every CVE, searchable.

The US government’s National Vulnerability Database, kept on Maple Labs’ own hardware and updated every two hours. Search by CVE, product or words, and filter by severity or CISA’s known-exploited list.

424,146 CVEs, updated from the NVD 1 hour ago.

1–20 of 30

  1. CVE-2026-45130 medium 5.5

    Vim is an open source, command line text editor. Prior to version 9.2.0450, a heap buffer overflow exists in read_compound() in src/spellfile.c when loading a crafted spell file (.spl) with UTF-8 encoding active. An attacker-controlled length field in the spell file's compound section overflows a 32-bit signed integer multiplication, causing a small buffer to be allocated for a write loop that runs many iterations, overflowing the heap. Because the 'spelllang' option can be set from a modeline, a text file modeline can trigger spell file loading if a malicious .spl file has been planted on the runtimepath. This issue has been patched in version 9.2.0450.

  2. CVE-2026-25749 medium 6.6

    Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the get_tagfname() function in src/tag.c. When processing help file tags, Vim copies the user-controlled 'helpfile' option value into a fixed-size heap buffer of MAXPATHL + 1 bytes (typically 4097 bytes) using an unsafe STRCPY() operation without any bounds checking. This issue has been patched in version 9.1.2132.

  3. CVE-2025-22134 medium 5.5

    When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does not properly end visual mode and therefore may try to access beyond the end of a line in a buffer. In Patch 9.1.1003 Vim will correctly reset the visual mode before opening other windows and buffers and therefore fix this bug. In addition it does verify that it won't try to access a position if the position is greater than the corresponding buffer line. Impact is medium since the user must have switched on visual mode when executing the :all ex command. The Vim project would like to thank github user gandalf4a for reporting this issue. The issue has been fixed as of Vim patch v9.1.1003

  4. CVE-2024-43374 medium 4.7

    The UNIX editor Vim prior to version 9.1.0678 has a use-after-free error in argument list handling. When adding a new file to the argument list, this triggers `Buf*` autocommands. If in such an autocommand the buffer that was just opened is closed (including the window where it is shown), this causes the window structure to be freed which contains a reference to the argument list that we are actually modifying. Once the autocommands are completed, the references to the window and argument list are no longer valid and as such cause an use-after-free. Impact is low since the user must either intentionally add some unusual autocommands that wipe a buffer during creation (either manually or by sourcing a malicious plugin), but it will crash Vim. The issue has been fixed as of Vim patch v9.1.0678.

  5. CVE-2024-41965 medium 4.2

    Vim is an open source command line text editor. double-free in dialog_changed() in Vim < v9.1.0648. When abandoning a buffer, Vim may ask the user what to do with the modified buffer. If the user wants the changed buffer to be saved, Vim may create a new Untitled file, if the buffer did not have a name yet. However, when setting the buffer name to Unnamed, Vim will falsely free a pointer twice, leading to a double-free and possibly later to a heap-use-after-free, which can lead to a crash. The issue has been fixed as of Vim patch v9.1.0648.

  6. CVE-2023-48706 medium 4.7

    Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability. When executing a `:s` command for the very first time and using a sub-replace-special atom inside the substitution part, it is possible that the recursive `:s` call causes free-ing of memory which may later then be accessed by the initial `:s` command. The user must intentionally execute the payload and the whole process is a bit tricky to do since it seems to work only reliably for the very first :s command. It may also cause a crash of Vim. Version 9.0.2121 contains a fix for this issue.

  7. CVE-2023-5535 high 7.8

    Use After Free in GitHub repository vim/vim prior to v9.0.2010.

  8. CVE-2023-4781 high 7.8

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873.

  9. CVE-2023-4752 high 7.8

    Use After Free in GitHub repository vim/vim prior to 9.0.1858.

  10. CVE-2023-4750 high 7.8

    Use After Free in GitHub repository vim/vim prior to 9.0.1857.

  11. CVE-2023-4733 high 7.8

    Use After Free in GitHub repository vim/vim prior to 9.0.1840.

  12. CVE-2023-4751 high 7.8

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331.

  13. CVE-2023-4738 high 7.8

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848.

  14. CVE-2023-4734 high 7.8

    Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846.

  15. CVE-2023-2426 medium 5.3

    Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.

  16. CVE-2023-1175 medium 6.6

    Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378.

  17. CVE-2023-1170 medium 6.6

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376.

  18. CVE-2023-0433 high 7.8

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225.

  19. CVE-2023-0288 high 7.8

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.

  20. CVE-2023-0049 high 7.8

    Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.