Skip to content
OpenAdvisories
High USN-8679-1 1 CVE

vim vulnerability

Published Aug 25, 2026 · Updated Oct 17, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Vim incorrectly handled certain tags files. An
attacker could possibly use this issue to execute arbitrary code.

Fixed packages 6

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS vim 2:8.2.3995-1ubuntu2.36
Ubuntu · 24.04 LTS 24.04:LTS vim 2:9.1.0016-1ubuntu7.20
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS vim 2:7.4.052-1ubuntu3.1+esm33
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS vim 2:7.4.1689-3ubuntu1.5+esm39
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS vim 2:8.0.1453-1ubuntu1.13+esm24
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS vim 2:8.1.2269-1ubuntu5.32+esm13

Vulnerabilities 1

  • High 7.1
    CVE-2026-73073

    Vim: Arbitrary Ex Command Execution in C Omni-Completion

    Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers() in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an untermina…

    vim vim vim vim Debian Ubuntu Azure Linux Alpine

References

  • report
    https://ubuntu.com/security/CVE-2026-73073