https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T07:55:33.264415+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-53920 CVE-2024-53920 2026-10-20T07:55:33.267036+00:00

Affected: gnu emacs

In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. (This unsafe expansion also occurs if a user chooses to enable on-the-fly diagnosis that byte compiles untrusted Emacs Lisp source code.)

 https://cve.radiocsirt.org/vuln/usn-8011-1 USN-8011-1 — emacs vulnerabilities 2026-10-20T07:55:33.267107+00:00

Affected: Ubuntu:Pro:20.04:LTS: emacs, Ubuntu:Pro:22.04:LTS: emacs, Ubuntu:Pro:24.04:LTS: emacs

It was discovered that Emacs could trigger unsafe Lisp macro expansion, when a user invoked elisp-completion-at-point on untrusted Emacs Lisp source code. An attacker could possibly use this issue to execute arbitrary code. (CVE-2024-53920)

It was discovered that Emacs did not properly sanitize input when handling certain URI schemes. An attacker could possibly use this issue to execute arbitrary shell commands by tricking a user into opening a specially crafted URL. (CVE-2025-1244)