UBUNTU-CVE-2026-73077

Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual-mode selections from K through keywordprg commands without safely separating shell arguments...

CVE-2026-73077

CVE-2026-73077 affects Vim prior to 9.2.0839. The issue arises in the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins, which pass attacker-controlled Visual-mode selections from K through keywordprg commands without safely separating shell argument...

PT-2026-70267

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.2.0839 Description Filetype plugins runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim fail to safely separate shell arguments when passing Visual-mode selections from K through keywordprg...