https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:51:43.070570+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:2366 ALSA-2023:2366 — Moderate: emacs security and bug fix update 2026-10-02T20:51:43.086039+00:00

Affected: AlmaLinux:9: emacs, AlmaLinux:9: emacs-common, AlmaLinux:9: emacs-filesystem, AlmaLinux:9: emacs-lucid, AlmaLinux:9: emacs-nox

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.

Security Fix(es):

* emacs: ctags local command execution vulnerability (CVE-2022-45939)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2024-05926 bdu:2024-05926 2026-10-02T20:51:43.086103+00:00 bdu:2024-05926 https://cve.radiocsirt.org/vuln/cleanstart-2024-mu53780 CLEANSTART-2024-MU53780 — GNU Emacs through 28 2026-10-02T20:51:43.086121+00:00

Affected: CleanStart: emacs

Security vulnerability affects the emacs package. GNU Emacs through 28.

 https://cve.radiocsirt.org/vuln/cnvd-2022-85329 cnvd-2022-85329 2026-10-02T20:51:43.086140+00:00 cnvd-2022-85329 https://cve.radiocsirt.org/vuln/euvd-2026-235472 EUVD-2026-235472 2026-10-02T20:51:43.086152+00:00 EUVD-2026-235472 https://cve.radiocsirt.org/vuln/fkie_cve-2022-45939 fkie_cve-2022-45939 2026-10-02T20:51:43.086162+00:00

GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C library function in its implementation of the ctags program. For example, a victim may use the "ctags *" command (suggested in the ctags documentation) in a situation where the current working directory has contents that depend on untrusted input.

 https://cve.radiocsirt.org/vuln/ghsa-m57w-hf24-4j3h GHSA-m57w-hf24-4j3h 2026-10-02T20:51:43.086184+00:00

GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C library function in its implementation of the ctags program. For example, a victim may use the "ctags *" command (suggested in the ctags documentation) in a situation where the current working directory has contents that depend on untrusted input.

 https://cve.radiocsirt.org/vuln/gsd-2022-45939 gsd-2022-45939 2026-10-02T20:51:43.086199+00:00 gsd-2022-45939 https://cve.radiocsirt.org/vuln/msrc_cve-2022-45939 msrc_CVE-2022-45939 — GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file… 2026-10-02T20:51:43.086208+00:00 msrc_CVE-2022-45939 https://cve.radiocsirt.org/vuln/oesa-2022-2131 OESA-2022-2131 — emacs security update 2026-10-02T20:51:43.086225+00:00

Affected: openEuler:20.03-LTS-SP1: emacs, openEuler:20.03-LTS-SP3: emacs, openEuler:22.03-LTS: emacs

Emacs is the extensible, customizable, self-documenting real-time display editor.At its core is an interpreter for Emacs Lisp, a dialect of the Lisp programming language with extensions to support text editing. And it is an entire ecosystem of functionality beyond text editing, including a project planner, mail and news reader, debugger interface, calendar, and more. Security Fix(es): GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C library function in its implementation of the ctags program. For example, a victim may use the "ctags *" command (suggested in the ctags documentation) in a situation where the current working directory has contents that depend on untrusted input.(CVE-2022-45939)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12541-1 openSUSE-SU-2024:12541-1 — emacs-28.2-1.1 on GA media 2026-10-02T20:51:43.086251+00:00

emacs-28.2-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2024:1103 RHSA-2024:1103 — Red Hat Security Advisory: emacs security update 2026-10-02T20:51:43.086266+00:00

emacs: ctags local command execution vulnerability emacs: command execution via shell metacharacters emacs: command injection vulnerability in htmlfontify.el

 https://cve.radiocsirt.org/vuln/suse-su-2022:4305-1 SUSE-SU-2022:4305-1 — Security update for emacs 2026-10-02T20:51:43.086282+00:00

Security update for emacs

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-45939 UBUNTU-CVE-2022-45939 2026-10-02T20:51:43.086295+00:00

Affected: Ubuntu:16.04:LTS: xemacs21, Ubuntu:16.04:LTS: xemacs21-packages, Ubuntu:Pro:16.04:LTS: emacs24, Ubuntu:Pro:18.04:LTS: emacs25, Ubuntu:18.04:LTS: xemacs21, Ubuntu:18.04:LTS: xemacs21-packages, Ubuntu:Pro:20.04:LTS: emacs, Ubuntu:20.04:LTS: xemacs21, Ubuntu:20.04:LTS: xemacs21-packages, Ubuntu:22.04:LTS: emacs and 8 more

GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C library function in its implementation of the ctags program. For example, a victim may use the "ctags *" command (suggested in the ctags documentation) in a situation where the current working directory has contents that depend on untrusted input.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2181 WID-SEC-W-2022-2181 — GNU Emacs: Schwachstelle ermöglicht Codeausführung 2026-10-02T20:51:43.086333+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in GNU Emacs ausnutzen, um beliebigen Programmcode auszuführen.