#emacs

1 stories this week · 3 this month · 10 in 6 months · mostly security

Stories per day · 30 days

9 stories, newest first · one card per story

X3r0Day reported inadequate validation; the oss-security post includes only a truncated files.el diff.

Salvatore Bonaccorso flags CVE-2026-108976 as an incomplete fix for Emacs CVE-2026-79992.

Maintainers say the Emacs fix for CVE-2026-79992 is incomplete and request another CVE.

Researchers found Emacs CVE-2026-79992's fix incomplete because TRAMP still accepts dangerous username characters.

Ubuntu warns Emacs can crash or leak data when opening a crafted SVG image.

oss-securitySep 23, 2026high

CVE-2026-96442 was assigned for an incomplete Emacs fix of arbitrary code execution CVE-2024-53920.

Bas Alberts asks Red Hat to assign a CVE for an incomplete Emacs fix of CVE-2024-53920.

Tomas Hoger asks oss-security whether GitHub or Red Hat will assign a CVE for Emacs's incomplete fix of arbitrary code execution bug CVE-2024-53920.

oss-securitySep 14, 2026high

Incomplete fix for Emacs CVE-2024-53920 allows arbitrary code execution when viewing or editing untrusted files in non-Lisp modes like Perl flymake.

Stories tagged #emacs