N
Neovim
Security Risk Profile
43
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 31 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 5, 2019 to present
31
Total CVEs
21
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
43/100
medium
Severity Distribution
Critical
0High
21Medium
9Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
3Age Distribution
Common Weaknesses (CWE)
1
Use After Free
20
2
Buffer Overflow
15
3
Integer Overflow
6
4
Race Condition
4
5
Input Validation
4
Most Affected Products
1. Fedoraproject Fedora46
2. vim Vim33
3. Neovim Neovim31
4. debian/vim20
5. Debian Debian Linux17
Recent Vulnerabilities
See more →CVE-2026-11487
CVSS 1.9low
Neovim View Branch secure.lua M.read command injection
Jun 8, 2026🔧 No Patch
CVE-2026-45130
CVSS 6.6medium
Vim: Heap Buffer Overflow in spell file loading
May 8, 2026
CVE-2026-25749
CVSS 6.6EPSS 0%medium
Heap Overflow in Vim
Feb 6, 2026🔧 No Patch
CVE-2025-22134
CVSS 5.5EPSS 0%medium
heap-buffer-overflow with visual mode in Vim < 9.1.1003
Jan 13, 2025
CVE-2024-43374
CVSS 4.7medium
Vim heap-use-after-free in src/arglist.c:207
Aug 15, 2024
CVE-2024-41965
CVSS 4.2medium
Vim < v9.1.0648 has a double-free in dialog_changed()
Aug 1, 2024
CVE-2023-48706
CVSS 4.7medium
Vim has heap-use-after-free at /src/charset.c:1770:12 in skipwhite
Nov 22, 2023
CVE-2023-5535
CVSS 7.8EPSS 0%high
Use After Free in vim/vim
Oct 11, 2023
CVE-2023-4781
CVSS 7.8high
Heap-based Buffer Overflow in vim/vim
Sep 5, 2023
CVE-2023-4733
CVSS 7.8high
Use After Free in vim/vim
Sep 4, 2023
Monitor Neovim in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.