Vulnerabilitymedium
Re: Emacs arbitrary code execution: incomplete fix for CVE-2024-53920
AI summary · grok-4.7Summaries by Vani AI
Bas Alberts asks Red Hat to assign a CVE for an incomplete Emacs fix of CVE-2024-53920.
Bas Alberts asked on oss-security for Red Hat to assign a CVE, in line with earlier batch item CVE-2026-79992, for an incomplete fix of Emacs arbitrary code execution flaw CVE-2024-53920. The short reply gives no technical details, patch status, or evidence of exploitation.
Key facts
- Incomplete fix reported for Emacs arbitrary code execution CVE-2024-53920.
- Bas Alberts asks Red Hat to assign a new CVE.
- He cites CVE-2026-79992 as the model for assignment.
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-53920 | In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can… | 7.8 | <1% | ||
| CVE-2026-79992 | Shell argument injection in GNU Emacs TRAMP (incomplete fix of CVE-2024-53920) | 7.8 | <1% |
From the original article
Posted by Bas Alberts on Sep 22 If Red Hat could provide the CVE in line with the previous finding of this report batch (CVE-2026-79992) that would be greatly appreciated. Thanks, Bas
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.