UBUNTU-CVE-2026-73077
- Source
- https://ubuntu.com/security/CVE-2026-73077
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-73077.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/UBUNTU-CVE-2026-73077
- Upstream
- Downstream
- Related
- Published
- 2026-08-11T16:17:00Z
- Modified
- 2026-08-21T20:32:27Z
- Severity
-
- 8.4 (High) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator
- Ubuntu - medium
- Summary
- [none]
- Details
-
Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual-mode selections from K through keywordprg commands without safely separating shell arguments. fnameescape() and PATH_ESC_CHARS do not neutralize shell metacharacters before ShKeywordPrg, ZshKeywordPrg, or GetHelp invokes bash, zsh, or PowerShell, allowing arbitrary operating-system commands to execute with the privileges of the user running Vim. This issue is fixed in version 9.2.0839.
- References
Affected packages
Ubuntu:22.04:LTS / vim
Package
- Name
- vim
- Purl
- pkg:deb/ubuntu/vim?arch=source&distro=jammy
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed2:8.2.3995-1ubuntu2.35
Affected versions
2:8.*
2:8.2.2434-3ubuntu3
2:8.2.2434-3ubuntu4
2:8.2.3565-1ubuntu1
2:8.2.3565-1ubuntu2
2:8.2.3565-1ubuntu3
2:8.2.3565-1ubuntu5
2:8.2.3995-1ubuntu1
2:8.2.3995-1ubuntu2
2:8.2.3995-1ubuntu2.1
2:8.2.3995-1ubuntu2.3
2:8.2.3995-1ubuntu2.4
2:8.2.3995-1ubuntu2.5
2:8.2.3995-1ubuntu2.7
2:8.2.3995-1ubuntu2.8
2:8.2.3995-1ubuntu2.9
2:8.2.3995-1ubuntu2.10
2:8.2.3995-1ubuntu2.11
2:8.2.3995-1ubuntu2.12
2:8.2.3995-1ubuntu2.13
2:8.2.3995-1ubuntu2.15
2:8.2.3995-1ubuntu2.16
2:8.2.3995-1ubuntu2.17
2:8.2.3995-1ubuntu2.18
2:8.2.3995-1ubuntu2.19
2:8.2.3995-1ubuntu2.20
2:8.2.3995-1ubuntu2.21
2:8.2.3995-1ubuntu2.22
2:8.2.3995-1ubuntu2.23
2:8.2.3995-1ubuntu2.24
2:8.2.3995-1ubuntu2.26
2:8.2.3995-1ubuntu2.27
2:8.2.3995-1ubuntu2.28
2:8.2.3995-1ubuntu2.29
2:8.2.3995-1ubuntu2.30
2:8.2.3995-1ubuntu2.31
2:8.2.3995-1ubuntu2.32
2:8.2.3995-1ubuntu2.33
2:8.2.3995-1ubuntu2.34
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "vim",
"binary_version": "2:8.2.3995-1ubuntu2.35"
},
{
"binary_name": "vim-athena",
"binary_version": "2:8.2.3995-1ubuntu2.35"
},
{
"binary_name": "vim-common",
"binary_version": "2:8.2.3995-1ubuntu2.35"
},
{
"binary_name": "vim-gtk",
"binary_version": "2:8.2.3995-1ubuntu2.35"
},
{
"binary_name": "vim-gtk3",
"binary_version": "2:8.2.3995-1ubuntu2.35"
},
{
"binary_name": "vim-gui-common",
"binary_version": "2:8.2.3995-1ubuntu2.35"
},
{
"binary_name": "vim-nox",
"binary_version": "2:8.2.3995-1ubuntu2.35"
},
{
"binary_name": "vim-runtime",
"binary_version": "2:8.2.3995-1ubuntu2.35"
},
{
"binary_name": "vim-tiny",
"binary_version": "2:8.2.3995-1ubuntu2.35"
},
{
"binary_name": "xxd",
"binary_version": "2:8.2.3995-1ubuntu2.35"
}
]
}
Ubuntu:24.04:LTS / vim
Package
- Name
- vim
- Purl
- pkg:deb/ubuntu/vim?arch=source&distro=noble
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed2:9.1.0016-1ubuntu7.19
Affected versions
2:9.*
2:9.0.1672-1ubuntu2
2:9.0.2087-1ubuntu1
2:9.0.2116-1ubuntu1
2:9.0.2116-1ubuntu2
2:9.0.2184-0ubuntu1
2:9.0.2189-1ubuntu1
2:9.1.0-1ubuntu1
2:9.1.0016-1ubuntu2
2:9.1.0016-1ubuntu6
2:9.1.0016-1ubuntu7
2:9.1.0016-1ubuntu7.1
2:9.1.0016-1ubuntu7.2
2:9.1.0016-1ubuntu7.3
2:9.1.0016-1ubuntu7.4
2:9.1.0016-1ubuntu7.5
2:9.1.0016-1ubuntu7.6
2:9.1.0016-1ubuntu7.7
2:9.1.0016-1ubuntu7.8
2:9.1.0016-1ubuntu7.9
2:9.1.0016-1ubuntu7.10
2:9.1.0016-1ubuntu7.11
2:9.1.0016-1ubuntu7.12
2:9.1.0016-1ubuntu7.13
2:9.1.0016-1ubuntu7.14
2:9.1.0016-1ubuntu7.15
2:9.1.0016-1ubuntu7.16
2:9.1.0016-1ubuntu7.17
2:9.1.0016-1ubuntu7.18
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "vim",
"binary_version": "2:9.1.0016-1ubuntu7.19"
},
{
"binary_name": "vim-athena",
"binary_version": "2:9.1.0016-1ubuntu7.19"
},
{
"binary_name": "vim-common",
"binary_version": "2:9.1.0016-1ubuntu7.19"
},
{
"binary_name": "vim-gtk3",
"binary_version": "2:9.1.0016-1ubuntu7.19"
},
{
"binary_name": "vim-gui-common",
"binary_version": "2:9.1.0016-1ubuntu7.19"
},
{
"binary_name": "vim-motif",
"binary_version": "2:9.1.0016-1ubuntu7.19"
},
{
"binary_name": "vim-nox",
"binary_version": "2:9.1.0016-1ubuntu7.19"
},
{
"binary_name": "vim-runtime",
"binary_version": "2:9.1.0016-1ubuntu7.19"
},
{
"binary_name": "vim-tiny",
"binary_version": "2:9.1.0016-1ubuntu7.19"
},
{
"binary_name": "xxd",
"binary_version": "2:9.1.0016-1ubuntu7.19"
}
]
}
Ubuntu:26.04:LTS / vim
Package
- Name
- vim
- Purl
- pkg:deb/ubuntu/vim?arch=source&distro=resolute
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed2:9.1.2141-1ubuntu4.8
Affected versions
2:9.*
2:9.1.0967-1ubuntu6
2:9.1.1882-1ubuntu1
2:9.1.1882-1ubuntu2
2:9.1.2141-1ubuntu1
2:9.1.2141-1ubuntu2
2:9.1.2141-1ubuntu4
2:9.1.2141-1ubuntu4.1
2:9.1.2141-1ubuntu4.2
2:9.1.2141-1ubuntu4.3
2:9.1.2141-1ubuntu4.5
2:9.1.2141-1ubuntu4.6
2:9.1.2141-1ubuntu4.7
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "vim",
"binary_version": "2:9.1.2141-1ubuntu4.8"
},
{
"binary_name": "vim-common",
"binary_version": "2:9.1.2141-1ubuntu4.8"
},
{
"binary_name": "vim-gtk3",
"binary_version": "2:9.1.2141-1ubuntu4.8"
},
{
"binary_name": "vim-gui-common",
"binary_version": "2:9.1.2141-1ubuntu4.8"
},
{
"binary_name": "vim-motif",
"binary_version": "2:9.1.2141-1ubuntu4.8"
},
{
"binary_name": "vim-nox",
"binary_version": "2:9.1.2141-1ubuntu4.8"
},
{
"binary_name": "vim-runtime",
"binary_version": "2:9.1.2141-1ubuntu4.8"
},
{
"binary_name": "vim-tiny",
"binary_version": "2:9.1.2141-1ubuntu4.8"
},
{
"binary_name": "xxd",
"binary_version": "2:9.1.2141-1ubuntu4.8"
}
]
}