ROOT-OS-DEBIAN-11-CVE-2026-73077 CVE-2026-73077 in vim - Patched by Root

Root has patched CVE-2026-73077 in the vim package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-73077 CVE-2026-73077 in vim - Patched by Root

Root has patched CVE-2026-73077 in the vim package for Root:Debian:12. Multiple fixed versions available...

CVE-2026-73077 affecting package vim for versions less than 9.2.0957-1

CVE-2026-73077 affecting package vim for versions less than 9.2.0957-1. An upgraded version of the package is available that resolves this issue...

SUSE CVE-2026-73077

Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual-mode selections from K through keywordprg commands without safely separating shell arguments...

Vim < 9.2.0839 OS Command Injection (GHSA-r5v6-q6j8-8qw2)

The version of Vim installed on the remote host is prior to 9.2.0839. It is, therefore, affected by a vulnerability as referenced in the GHSA-r5v6-q6j8-8qw2 advisory. - The runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled...

Linux Distros Unpatched Vulnerability : CVE-2026-73077

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype...

CVE-2026-73077

Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual-mode selections from K through keywordprg commands without safely separating shell arguments...

CVE-2026-73077

CVE-2026-73077 affects Vim prior to 9.2.0839. The issue arises in the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins, which pass attacker-controlled Visual-mode selections from K through keywordprg commands without safely separating shell argument...