Critical Security Update for vim and vim-common: CVE-2026-73073
Summary
RHSA-2026:75769: Red Hat Security Advisory: vim security update. Affects vim-common versions < 2:9.1.083-9.el10_2.22. Fixed in 2:9.1.083-9.el10_2.22. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
vim is a highly configurable text editor built to enable efficient text editing. It is widely used in programming and system administration due to its powerful features and extensibility. The vim-common package provides shared files for the vim editor. The vulnerability identified as CVE-2026-73073 affects both vim and vim-common, potentially allowing unauthorized access to sensitive information.
Vulnerability Detail
The vulnerability CVE-2026-73073 arises from improper handling of certain input, which can lead to a buffer overflow. This flaw can be exploited by attackers to execute arbitrary code, potentially compromising the integrity and confidentiality of the system. The severity of this vulnerability is underscored by its CVSS score of 7.3, indicating a high risk to affected systems.
How To Fix
Minimum fixed version
2:9.1.083-9.el10_2.22
This is the first release that contains the fix.
sudo dnf update vim-commonTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit access to the vim editor or avoid using it until the update is applied. Additionally, consider using alternative text editors that are not affected by this vulnerability.
Conclusion
The vulnerability CVE-2026-73073 poses a significant risk to users of vim and vim-common. It is crucial to apply the necessary updates to protect your system from potential exploitation. Regular monitoring and timely updates are essential to maintaining software security.
See every vulnerability recorded for vim-common →
FAQ
CVE-2026-73073 is a security vulnerability in the vim and vim-common packages that can lead to arbitrary code execution due to improper input handling.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without any signup.
The CVSS score for CVE-2026-73073 is 7.3, indicating a high severity level.
If immediate updates are not possible, consider using alternative text editors and restrict access to vim until the vulnerability is patched.
More information can be found in the Red Hat Security Advisory at https://security.access.redhat.com/data/osv/RHSA-2026:75769.json.
Related vulnerabilities
Recent vulnerabilities recorded for vim-common.
