> USN-8011-1: Emacs vulnerabilities

[SOURCE] Ubuntu Security Notices [DATE: 04/02/2026 09:51] [LANGUAGE: EN]

It was discovered that Emacs could trigger unsafe Lisp macro expansion,
when a user invoked elisp-completion-at-point on untrusted Emacs Lisp 
source code. An attacker could possibly use this issue to execute 
arbitrary code. (CVE-2024-53920)

It was discovered that Emacs did not properly sanitize input when 
handling certain URI schemes. An attacker could possibly use this issue
to execute arbitrary shell commands by tricking a user into opening a 
specially crafted URL. (CVE-2025-1244)

[messages.read_original_source] →