{"id":"USN-8679-2","summary":"vim vulnerability","details":"USN-8679-1 fixed a vulnerability in Vim. This update provides the\ncorresponding update for Ubuntu 26.04 LTS.\n\nOriginal advisory details:\n\n It was discovered that Vim incorrectly handled certain tags files. An\n attacker could possibly use this issue to execute arbitrary code.","modified":"2026-09-10T00:56:35.260126931Z","published":"2026-09-08T17:12:17Z","related":["UBUNTU-CVE-2026-73073"],"upstream":["CVE-2026-73073","UBUNTU-CVE-2026-73073"],"references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-8679-2"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-73073"}],"affected":[{"package":{"name":"vim","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/vim?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.1.2141-1ubuntu4.9"}]}],"versions":["2:9.1.0967-1ubuntu6","2:9.1.1882-1ubuntu1","2:9.1.1882-1ubuntu2","2:9.1.2141-1ubuntu1","2:9.1.2141-1ubuntu2","2:9.1.2141-1ubuntu4","2:9.1.2141-1ubuntu4.1","2:9.1.2141-1ubuntu4.2","2:9.1.2141-1ubuntu4.3","2:9.1.2141-1ubuntu4.5","2:9.1.2141-1ubuntu4.6","2:9.1.2141-1ubuntu4.7","2:9.1.2141-1ubuntu4.8"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"vim","binary_version":"2:9.1.2141-1ubuntu4.9"},{"binary_name":"vim-common","binary_version":"2:9.1.2141-1ubuntu4.9"},{"binary_version":"2:9.1.2141-1ubuntu4.9","binary_name":"vim-gtk3"},{"binary_name":"vim-gui-common","binary_version":"2:9.1.2141-1ubuntu4.9"},{"binary_name":"vim-motif","binary_version":"2:9.1.2141-1ubuntu4.9"},{"binary_name":"vim-nox","binary_version":"2:9.1.2141-1ubuntu4.9"},{"binary_name":"vim-runtime","binary_version":"2:9.1.2141-1ubuntu4.9"},{"binary_name":"vim-tiny","binary_version":"2:9.1.2141-1ubuntu4.9"},{"binary_version":"2:9.1.2141-1ubuntu4.9","binary_name":"xxd"}]},"database_specific":{"cves_map":{"cves":[{"id":"CVE-2026-73073","severity":[{"score":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"Ubuntu","score":"medium"}]}],"ecosystem":"Ubuntu:26.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8679-2.json"}}],"schema_version":"1.9.0"}