PatchFirst · Latest vulnerabilities
Vulnerabilities published for emacs in the last 30 days: 2. Listed in the KEV catalogue: 0.
Vulnerabilities: 7
This update for emacs fixes the following issues: - CVE-2026-79992: zero-click local command execution via TRAMP (bsc#1275927). - CVE-2026-108976: flawed username input regex validation in TRAMP can cause arbitrary OS command injection (bsc#1284345, bsc#1284990).
This update for emacs fixes the following issue: - CVE-2026-96442: arbitrary code execution when viewing or editing untrusted text files in modes other than Emacs Lisp mode due to incomplete fix for CVE (bsc#1282390).
This update for emacs fixes the following issues: - Arbitrary code execution when opening a specially crafted file (bsc#1275941). - CVE-2026-77219: integer overflow in the PBM/PPM/PGM image loader leads to heap memory content leaks when a crafted image with large dimensions and an elevated max color index is processed (bsc#1276264). - CVE-2026-79992: improper argument sanitization in TRAMP leads to arbitrary code execution via crafted filenames (bsc#1275927).
This update for emacs fixes the following issues: - CVE-2024-53920: Fixed arbitrary code execution via Lisp macro expansion (bsc#1233894).
This update for emacs fixes the following issues: - CVE-2025-1244: improper handling of custom 'man' URI schemes allow for shell command injections. (bsc#1237091)
This update for emacs fixes the following issues: - CVE-2024-53920: Fixed arbitrary code execution via Lisp macro expansion (bsc#1233894)
This update for emacs fixes the following issues: - CVE-2024-39331: Fixed evaluation of arbitrary unsafe Elisp code in Org mode (bsc#1226957).
Check your installed stack and versions against the current vulnerability feeds.