PatchTheCVEvimium vulnerabilities and fixes
Recent CVEs affecting vimium, with upgrade or downgrade steps. 1 tracked.
vimium has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2023-02-03. Highest priority: CVE-2021-37518 (score 39/100).
- CVE-2021-37518 MEDIUM 6.1 UPGRADE Universal Cross Site Scripting (UXSS) vulnerability in Vimium Extension 1.66 and earlier allows remote attacke
FAQ
How do I fix vimium vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is vimium being exploited right now?
None of the tracked vimium CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which vimium CVE should I patch first?
CVE-2021-37518 currently ranks highest (39/100): Universal Cross Site Scripting (UXSS) vulnerability in Vimium Extension 1.66 and earlier allows remote attacke.