CVE-2022-3591: Neovim

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Use After Free in GitHub repository vim/vim prior to 9.0.0789.

Affected products

  • Neovim Neovim: from 0.1.0, before 0.9.0 (fixed in 0.9.0)
  • Vim Vim: before 9.0.0789 (fixed in 9.0.0789)

Published 2022-12-02. Last modified 2026-09-24.