Emacs

Search everything

Mentions · 7d1
Mentions · 30d2
All mentions7
First seenSep 7, 2026
Last mentioned4h ago

Timeline

7 articles · newest first

Emacs 31.1 .dir-locals.el flaw can run arbitrary code

X3r0Day reported inadequate validation; the oss-security post includes only a truncated files.el diff.

oss-security16:14 UTC · 4h agoVulnerability

Re: Incomplete fix for Emacs CVE-2026-79992

Salvatore Bonaccorso flags CVE-2026-108976 as an incomplete fix for Emacs CVE-2026-79992.

oss-securityOct 15, 06:35 UTC · 27d agoVulnerabilityCVE-2026-79992 CVE-2026-1089763 · 1 read

Incomplete fix for Emacs CVE-2026-79992

Researchers found Emacs CVE-2026-79992's fix incomplete because TRAMP still accepts dangerous username characters.

oss-securityOct 11, 15:15 UTC · Oct 11, 2026VulnerabilityCVE-2026-799923 · 1 read

USN-8835-1: Emacs vulnerability

Ubuntu warns Emacs can crash or leak data when opening a crafted SVG image.

Ubuntu Security NoticesSep 28, 14:33 UTC · Sep 28, 2026Advisory1 · 1 read

Neomacs: GPU rendered Rust hard fork of Emacs

Neomacs, a GPU-rendered Rust hard fork of Emacs, drew discussion on Hacker News.

Hacker News · AISep 26, 16:03 UTC · Sep 26, 2026Other HN 40 points · 2 comments3 · 1 read

Re: Emacs arbitrary code execution: incomplete fix for CVE-2024-53920

Bas Alberts asks Red Hat to assign a CVE for an incomplete Emacs fix of CVE-2024-53920.

oss-securitySep 22, 15:24 UTC · Sep 22, 2026VulnerabilityCVE-2024-53920 CVE-2026-799922 · 1 read

Emacs Bedrock 2.0

Emacs Bedrock 2.0 starter kit requires Emacs 31, switching to lexical-binding, improved tree-sitter config, and use-package auto-install defaults.

Hacker News · AISep 7, 20:12 UTC · Sep 7, 2026Other HN 157 points · 38 comments1 · 1 read

Related CVEs

by mentions

CVE-2026-79992<1%7.8
Shell argument injection in GNU Emacs TRAMP (incomplete fix of CVE-2024-53920)
published Aug 25, 2026GNU Project (Free Software Foundation) Emacs TRAMP (bundled with GNU Emacs)
CVE-2024-53920<1%7.8
In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can…
published Nov 27, 2024gnu emacs
CVE-2026-1089767.8
OS command injection in GNU Emacs and TRAMP via filename
published Oct 11, 2026GNU Emacs

Appears with

GNUvendor · 3
Neomacsproduct · 1
Canonicalvendor · 1
Ubuntuorganization · 1
TRAMPproduct · 1
Red Hatorganization · 1
Bedrockproduct · 1
78ResearchLaborganization · 1

Entities are extracted by the model from each article. First seen Sep 7, 2026, last mentioned 4h ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.