https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T04:25:41.003234+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-1244 CVE-2025-1244 — Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme 2026-10-20T04:25:41.004944+00:00

Affected: emacs, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions and 8 more

A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking users into visiting a specially crafted website or an HTTP URL with a redirect.

 https://cve.radiocsirt.org/vuln/usn-8011-1 USN-8011-1 — emacs vulnerabilities 2026-10-20T04:25:41.005074+00:00

Affected: Ubuntu:Pro:20.04:LTS: emacs, Ubuntu:Pro:22.04:LTS: emacs, Ubuntu:Pro:24.04:LTS: emacs

It was discovered that Emacs could trigger unsafe Lisp macro expansion, when a user invoked elisp-completion-at-point on untrusted Emacs Lisp source code. An attacker could possibly use this issue to execute arbitrary code. (CVE-2024-53920)

It was discovered that Emacs did not properly sanitize input when handling certain URI schemes. An attacker could possibly use this issue to execute arbitrary shell commands by tricking a user into opening a specially crafted URL. (CVE-2025-1244)