Skip to content
OpenAdvisories
High USN-8679-2 1 CVE

vim vulnerability

Published Sep 8, 2026 · Updated Oct 17, 2026

Ecosystem: Ubuntu

Summary

USN-8679-1 fixed a vulnerability in Vim. This update provides the
corresponding update for Ubuntu 26.04 LTS.

Original advisory details:

It was discovered that Vim incorrectly handled certain tags files. An
attacker could possibly use this issue to execute arbitrary code.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 26.04 LTS 26.04:LTS vim 2:9.1.2141-1ubuntu4.9

Vulnerabilities 1

  • High 7.1
    CVE-2026-73073

    Vim: Arbitrary Ex Command Execution in C Omni-Completion

    Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers() in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an untermina…

    vim vim vim vim Debian Ubuntu Azure Linux Alpine

References

  • report
    https://ubuntu.com/security/CVE-2026-73073