Every CVE Search/ Get API key

CVE-2024-53920

In elisp-mode.el in GNU Emacs through 30.0.92, a user who chooses to invoke elisp-completion-at...

7.8 HighFix available

In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. (This unsafe expansion also occurs if a user chooses to enable on-the-fly diagnosis that byte compiles untrusted Emacs Lisp source code.)

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.60%Up 0.6 points since Nov 28, 2024
90%50%10%1%

What each source reports

CVE List Score used 7.8

In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. (This unsafe expansion also occurs if a user chooses to enable on-the-fly diagnosis that byte compiles untrusted Emacs Lisp source code.)

Record
CVE-2024-53920
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-94
Updated
2026-11-02
EUVDEUVD-2024-52189 7.8

In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. (This unsafe expansion also occurs if a user chooses to enable on-the-fly diagnosis that byte compiles untrusted Emacs Lisp source code.)

Record
EUVD-2024-52189
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-8737-h7fg-9xgj 9.8

In elisp-mode.el in GNU Emacs through 30.0.92, a user who chooses to invoke elisp-completion-at...

In elisp-mode.el in GNU Emacs through 30.0.92, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. (This unsafe expansion also occurs if a user chooses to enable on-the-fly diagnosis that byte compiles untrusted Emacs Lisp source code.)

Record
GHSA-8737-h7fg-9xgj
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-94
Updated
2026-11-02
NVD 7.8

In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. (This unsafe expansion also occurs if a user chooses to enable on-the-fly diagnosis that byte compiles untrusted Emacs Lisp source code.)

Record
CVE-2024-53920
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-94
Updated
2026-11-02
OSV 7.8

In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. (This unsafe expansion also occurs if a user chooses to enable on-the-fly diagnosis that byte compiles untrusted Emacs Lisp source code.)

Record
CVE-2024-53920
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2024-53920 7.8

In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. (This unsafe expansion also occurs if a user chooses to enable on-the-fly diagnosis that byte compiles untrusted Emacs Lisp source code.)

Record
DEBIAN-CVE-2024-53920
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 20 moreShow less
OSVOESA-2025-2760 7.8

emacs security update

Emacs is the extensible, customizable, self-documenting real-time display editor. At its core is an interpreter for Emacs Lisp, a dialect of the Lisp programming language with extensions to support text editing. And it is an entire ecosystem of functionality beyond text editing, including a project planner, mail and news reader, debugger interface, calendar, and more.

Security Fix(es):

In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. (This unsafe expansion also occurs if a user chooses to enable on-the-fly diagnosis that byte compiles untrusted Emacs Lisp source code.)(CVE-2024-53920)

Record
OESA-2025-2760
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:11030 7.8

Red Hat Security Advisory: emacs security update

Record
RHSA-2025:11030
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:4787 7.8

Red Hat Security Advisory: emacs security update

Record
RHSA-2025:4787
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:4793 7.8

Red Hat Security Advisory: emacs security update

Record
RHSA-2025:4793
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:4794 7.8

Red Hat Security Advisory: emacs security update

Record
RHSA-2025:4794
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:9448 7.8

Red Hat Security Advisory: emacs security update

Record
RHSA-2025:9448
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:11030 7.8

Moderate: emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.

Security Fix(es):

  • emacs: arbitrary code execution via Lisp macro expansion (CVE-2024-53920)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:11030
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:4787 7.8

Moderate: emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.

Security Fix(es):

  • emacs: arbitrary code execution via Lisp macro expansion (CVE-2024-53920)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:4787
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:9448 7.8

Moderate: emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.

Security Fix(es):

  • emacs: arbitrary code execution via Lisp macro expansion (CVE-2024-53920)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:9448
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2024-53920 7.8

In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. (This unsafe expansion also occurs if a user chooses to enable on-the-fly diagnosis that byte compiles untrusted Emacs Lisp source code.)

Record
UBUNTU-CVE-2024-53920
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2025:11030 No score

Moderate: emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.

Security Fix(es):

  • emacs: arbitrary code execution via Lisp macro expansion (CVE-2024-53920)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:11030
Updated
2026-11-02
OSVALSA-2025:4787 No score

Moderate: emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.

Security Fix(es):

  • emacs: arbitrary code execution via Lisp macro expansion (CVE-2024-53920)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:4787
Updated
2026-11-02
OSVALSA-2025:9448 No score

Moderate: emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.

Security Fix(es):

  • emacs: arbitrary code execution via Lisp macro expansion (CVE-2024-53920)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:9448
Updated
2026-11-02
OSVAZL-53558 No score

CVE-2024-53920 affecting package emacs for versions less than 29.4-3

In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. (This unsafe expansion also occurs if a user chooses to enable on-the-fly diagnosis that byte compiles untrusted Emacs Lisp source code.)

Record
AZL-53558
Updated
2026-11-02
OSVAZL-53703 No score

CVE-2024-53920 affecting package emacs for versions less than 29.4-3

In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. (This unsafe expansion also occurs if a user chooses to enable on-the-fly diagnosis that byte compiles untrusted Emacs Lisp source code.)

Record
AZL-53703
Updated
2026-11-02
OSVMGASA-2024-0397 No score

Updated emacs packages fix security vulnerability

In elisp-mode.el in GNU Emacs through 30.0.92, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. (This unsafe expansion also occurs if a user chooses to enable on-the-fly diagnosis that byte compiles untrusted Emacs Lisp source code). (CVE-2024-53920)

Record
MGASA-2024-0397
Updated
2026-11-02
OSVopenSUSE-SU-2024:14591-1 No score

emacs-29.4-11.1 on GA media

These are all security issues fixed in the emacs-29.4-11.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14591-1
Updated
2026-11-02
OSVSUSE-SU-2024:4392-1 No score

Security update for emacs

This update for emacs fixes the following issues:

  • CVE-2024-53920: Fixed arbitrary code execution via Lisp macro expansion (bsc#1233894)
Record
SUSE-SU-2024:4392-1
Updated
2026-11-02
OSVSUSE-SU-2025:0798-1 No score

Security update for emacs

This update for emacs fixes the following issues:

  • CVE-2024-53920: Fixed arbitrary code execution via Lisp macro expansion (bsc#1233894).
Record
SUSE-SU-2025:0798-1
Updated
2026-11-02
OSVUSN-8011-1 No score

emacs vulnerabilities

It was discovered that Emacs could trigger unsafe Lisp macro expansion, when a user invoked elisp-completion-at-point on untrusted Emacs Lisp source code. An attacker could possibly use this issue to execute arbitrary code. (CVE-2024-53920)

It was discovered that Emacs did not properly sanitize input when handling certain URI schemes. An attacker could possibly use this issue to execute arbitrary shell commands by tricking a user into opening a specially crafted URL. (CVE-2025-1244)

Record
USN-8011-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
emacs
AlmaLinux:8
 before 1:26.1-15.el8_10
1:26.1-15.el8_10
emacs-common
AlmaLinux:8
 before 1:26.1-15.el8_10
1:26.1-15.el8_10
emacs-lucid
AlmaLinux:8
 before 1:26.1-15.el8_10
1:26.1-15.el8_10
emacs-nox
AlmaLinux:8
 before 1:26.1-15.el8_10
1:26.1-15.el8_10
emacs-terminal
AlmaLinux:8
 before 1:26.1-15.el8_10
1:26.1-15.el8_10
emacs
AlmaLinux:9
 before 1:27.2-11.el9_5.2
1:27.2-11.el9_5.2
emacs-common
AlmaLinux:9
 before 1:27.2-11.el9_5.2
1:27.2-11.el9_5.2
emacs-filesystem
AlmaLinux:9
 before 1:27.2-11.el9_5.2
1:27.2-11.el9_5.2
emacs-lucid
AlmaLinux:9
 before 1:27.2-11.el9_5.2
1:27.2-11.el9_5.2
emacs-nox
AlmaLinux:9
 before 1:27.2-11.el9_5.2
1:27.2-11.el9_5.2
Show 120 moreShow less
Affected packages
PackageAffectedFixed
emacs
AlmaLinux:9
 before 1:27.2-14.el9_6.2
1:27.2-14.el9_6.2
emacs-common
AlmaLinux:9
 before 1:27.2-14.el9_6.2
1:27.2-14.el9_6.2
emacs-filesystem
AlmaLinux:9
 before 1:27.2-14.el9_6.2
1:27.2-14.el9_6.2
emacs-lucid
AlmaLinux:9
 before 1:27.2-14.el9_6.2
1:27.2-14.el9_6.2
emacs-nox
AlmaLinux:9
 before 1:27.2-14.el9_6.2
1:27.2-14.el9_6.2
emacs
Azure Linux:3
 before 29.4-3
29.4-3
emacs
Azure Linux:2
 before 29.4-3
29.4-3
emacs
Debian:12
 before 1:28.2+1-15+deb12u4, plus listed versions
1:28.2+1-151:28.2+1-15+deb12u11:28.2+1-15+deb12u21:28.2+1-15+deb12u3
1:28.2+1-15+deb12u4
emacs
Debian:13
 before 1:30.1+1-1
1:30.1+1-1
emacs
Debian:14
 before 1:30.1+1-1
1:30.1+1-1
emacs
Debian:11
 before 1:27.1+1-3.1+deb11u6, plus listed versions
1:27.1+1-3.11:27.1+1-3.1+deb11u11:27.1+1-3.1+deb11u21:27.1+1-3.1+deb11u31:27.1+1-3.1+deb11u41:27.1+1-3.1+deb11u5
1:27.1+1-3.1+deb11u6
emacs
Mageia:9
 before 29.4-1.2.mga9
29.4-1.2.mga9
emacs
openEuler:22.03-LTS-SP3
 before 27.2-17.oe2203sp3
27.2-17.oe2203sp3
emacs
openEuler:22.03-LTS-SP4
 before 27.2-17.oe2203sp4
27.2-17.oe2203sp4
emacs
openEuler:24.03-LTS
 before 29.1-7.oe2403sp2
29.1-7.oe2403sp2
emacs
openEuler:24.03-LTS-SP1
 before 29.1-7.oe2403sp1
29.1-7.oe2403sp1
emacs
openEuler:24.03-LTS-SP2
 before 29.1-7.oe2403sp2
29.1-7.oe2403sp2
emacs
openEuler:20.03-LTS-SP4
 before 27.1-17.oe2003sp4
27.1-17.oe2003sp4
emacs
Red Hat:enterprise_linux:8::appstream
 before 1:26.1-15.el8_10
1:26.1-15.el8_10
emacs-common
Red Hat:enterprise_linux:8::appstream
 before 1:26.1-15.el8_10
1:26.1-15.el8_10
emacs-common-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 1:26.1-15.el8_10
1:26.1-15.el8_10
emacs-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 1:26.1-15.el8_10
1:26.1-15.el8_10
emacs-debugsource
Red Hat:enterprise_linux:8::appstream
 before 1:26.1-15.el8_10
1:26.1-15.el8_10
emacs-lucid
Red Hat:enterprise_linux:8::appstream
 before 1:26.1-15.el8_10
1:26.1-15.el8_10
emacs-lucid-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 1:26.1-15.el8_10
1:26.1-15.el8_10
emacs-nox
Red Hat:enterprise_linux:8::appstream
 before 1:26.1-15.el8_10
1:26.1-15.el8_10
emacs-nox-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 1:26.1-15.el8_10
1:26.1-15.el8_10
emacs-terminal
Red Hat:enterprise_linux:8::appstream
 before 1:26.1-15.el8_10
1:26.1-15.el8_10
emacs
Red Hat:enterprise_linux:8::baseos
 before 1:26.1-15.el8_10
1:26.1-15.el8_10
emacs-filesystem
Red Hat:enterprise_linux:8::baseos
 before 1:26.1-15.el8_10
1:26.1-15.el8_10
emacs
Red Hat:enterprise_linux:9::appstream
 before 1:27.2-11.el9_5.2
1:27.2-11.el9_5.2
emacs-common
Red Hat:enterprise_linux:9::appstream
 before 1:27.2-11.el9_5.2
1:27.2-11.el9_5.2
emacs-common-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 1:27.2-11.el9_5.2
1:27.2-11.el9_5.2
emacs-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 1:27.2-11.el9_5.2
1:27.2-11.el9_5.2
emacs-debugsource
Red Hat:enterprise_linux:9::appstream
 before 1:27.2-11.el9_5.2
1:27.2-11.el9_5.2
emacs-filesystem
Red Hat:enterprise_linux:9::appstream
 before 1:27.2-11.el9_5.2
1:27.2-11.el9_5.2
emacs-lucid
Red Hat:enterprise_linux:9::appstream
 before 1:27.2-11.el9_5.2
1:27.2-11.el9_5.2
emacs-lucid-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 1:27.2-11.el9_5.2
1:27.2-11.el9_5.2
emacs-nox
Red Hat:enterprise_linux:9::appstream
 before 1:27.2-11.el9_5.2
1:27.2-11.el9_5.2
emacs-nox-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 1:27.2-11.el9_5.2
1:27.2-11.el9_5.2
emacs
Red Hat:rhel_eus:9.4::appstream
 before 1:27.2-10.el9_4.2
1:27.2-10.el9_4.2
emacs-common
Red Hat:rhel_eus:9.4::appstream
 before 1:27.2-10.el9_4.2
1:27.2-10.el9_4.2
emacs-common-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 1:27.2-10.el9_4.2
1:27.2-10.el9_4.2
emacs-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 1:27.2-10.el9_4.2
1:27.2-10.el9_4.2
emacs-debugsource
Red Hat:rhel_eus:9.4::appstream
 before 1:27.2-10.el9_4.2
1:27.2-10.el9_4.2
emacs-filesystem
Red Hat:rhel_eus:9.4::appstream
 before 1:27.2-10.el9_4.2
1:27.2-10.el9_4.2
emacs-lucid
Red Hat:rhel_eus:9.4::appstream
 before 1:27.2-10.el9_4.2
1:27.2-10.el9_4.2
emacs-lucid-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 1:27.2-10.el9_4.2
1:27.2-10.el9_4.2
emacs-nox
Red Hat:rhel_eus:9.4::appstream
 before 1:27.2-10.el9_4.2
1:27.2-10.el9_4.2
emacs-nox-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 1:27.2-10.el9_4.2
1:27.2-10.el9_4.2
emacs
Red Hat:rhel_eus:9.2::appstream
 before 1:27.2-8.el9_2.3
1:27.2-8.el9_2.3
emacs-common
Red Hat:rhel_eus:9.2::appstream
 before 1:27.2-8.el9_2.3
1:27.2-8.el9_2.3
emacs-common-debuginfo
Red Hat:rhel_eus:9.2::appstream
 before 1:27.2-8.el9_2.3
1:27.2-8.el9_2.3
emacs-debuginfo
Red Hat:rhel_eus:9.2::appstream
 before 1:27.2-8.el9_2.3
1:27.2-8.el9_2.3
emacs-debugsource
Red Hat:rhel_eus:9.2::appstream
 before 1:27.2-8.el9_2.3
1:27.2-8.el9_2.3
emacs-filesystem
Red Hat:rhel_eus:9.2::appstream
 before 1:27.2-8.el9_2.3
1:27.2-8.el9_2.3
emacs-lucid
Red Hat:rhel_eus:9.2::appstream
 before 1:27.2-8.el9_2.3
1:27.2-8.el9_2.3
emacs-lucid-debuginfo
Red Hat:rhel_eus:9.2::appstream
 before 1:27.2-8.el9_2.3
1:27.2-8.el9_2.3
emacs-nox
Red Hat:rhel_eus:9.2::appstream
 before 1:27.2-8.el9_2.3
1:27.2-8.el9_2.3
emacs-nox-debuginfo
Red Hat:rhel_eus:9.2::appstream
 before 1:27.2-8.el9_2.3
1:27.2-8.el9_2.3
emacs
Red Hat:enterprise_linux:9::appstream
 before 1:27.2-14.el9_6.2
1:27.2-14.el9_6.2
emacs-common
Red Hat:enterprise_linux:9::appstream
 before 1:27.2-14.el9_6.2
1:27.2-14.el9_6.2
emacs-common-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 1:27.2-14.el9_6.2
1:27.2-14.el9_6.2
emacs-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 1:27.2-14.el9_6.2
1:27.2-14.el9_6.2
emacs-debugsource
Red Hat:enterprise_linux:9::appstream
 before 1:27.2-14.el9_6.2
1:27.2-14.el9_6.2
emacs-filesystem
Red Hat:enterprise_linux:9::appstream
 before 1:27.2-14.el9_6.2
1:27.2-14.el9_6.2
emacs-lucid
Red Hat:enterprise_linux:9::appstream
 before 1:27.2-14.el9_6.2
1:27.2-14.el9_6.2
emacs-lucid-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 1:27.2-14.el9_6.2
1:27.2-14.el9_6.2
emacs-nox
Red Hat:enterprise_linux:9::appstream
 before 1:27.2-14.el9_6.2
1:27.2-14.el9_6.2
emacs-nox-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 1:27.2-14.el9_6.2
1:27.2-14.el9_6.2
emacs
Rocky Linux:8
 before 1:26.1-15.el8_10
1:26.1-15.el8_10
emacs
Rocky Linux:9
 before 1:27.2-11.el9_5.2
1:27.2-11.el9_5.2
emacs
Rocky Linux:9
 before 1:27.2-14.el9_6.2
1:27.2-14.el9_6.2
emacs
SUSE:Linux Enterprise Module for Basesystem 15 SP5
 before 27.2-150400.3.20.2
27.2-150400.3.20.2
emacs
SUSE:Linux Enterprise Module for Basesystem 15 SP6
 before 27.2-150400.3.20.2
27.2-150400.3.20.2
emacs
SUSE:Linux Enterprise Module for Desktop Applications 15 SP5
 before 27.2-150400.3.20.2
27.2-150400.3.20.2
emacs
SUSE:Linux Enterprise Module for Desktop Applications 15 SP6
 before 27.2-150400.3.20.2
27.2-150400.3.20.2
emacs
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 27.2-150400.3.20.2
27.2-150400.3.20.2
emacs
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 27.2-150400.3.20.2
27.2-150400.3.20.2
emacs
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 27.2-150400.3.20.2
27.2-150400.3.20.2
emacs
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 27.2-150400.3.20.2
27.2-150400.3.20.2
emacs
SUSE:Manager Proxy 4.3
 before 27.2-150400.3.20.2
27.2-150400.3.20.2
emacs
SUSE:Manager Server 4.3
 before 27.2-150400.3.20.2
27.2-150400.3.20.2
emacs
openSUSE:Leap 15.5
 before 27.2-150400.3.20.2
27.2-150400.3.20.2
emacs
openSUSE:Leap 15.6
 before 27.2-150400.3.20.2
27.2-150400.3.20.2
emacs
SUSE:Linux Enterprise Module for Basesystem 15 SP6
 before 27.2-150400.3.26.1
27.2-150400.3.26.1
emacs
SUSE:Linux Enterprise Module for Desktop Applications 15 SP6
 before 27.2-150400.3.26.1
27.2-150400.3.26.1
emacs
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 27.2-150400.3.26.1
27.2-150400.3.26.1
emacs
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 27.2-150400.3.26.1
27.2-150400.3.26.1
emacs
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
 before 27.2-150400.3.26.1
27.2-150400.3.26.1
emacs
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
 before 27.2-150400.3.26.1
27.2-150400.3.26.1
emacs
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 27.2-150400.3.26.1
27.2-150400.3.26.1
emacs
SUSE:Linux Enterprise Server 15 SP5-LTSS
 before 27.2-150400.3.26.1
27.2-150400.3.26.1
emacs
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 27.2-150400.3.26.1
27.2-150400.3.26.1
emacs
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
 before 27.2-150400.3.26.1
27.2-150400.3.26.1
emacs
SUSE:Manager Proxy 4.3
 before 27.2-150400.3.26.1
27.2-150400.3.26.1
emacs
SUSE:Manager Server 4.3
 before 27.2-150400.3.26.1
27.2-150400.3.26.1
emacs
openSUSE:Leap 15.6
 before 27.2-150400.3.26.1
27.2-150400.3.26.1
emacs24
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
24.5+1-1ubuntu224.5+1-1ubuntu424.5+1-1ubuntu524.5+1-1ubuntu624.5+1-1ubuntu7
Show 6 moreShow less
24.5+1-6ubuntu124.5+1-6ubuntu1.124.5+1-6ubuntu1.1+esm124.5+1-6ubuntu1.1+esm224.5+1-6ubuntu1.1+esm324.5+1-6ubuntu1.1+esm4
 None known
xemacs21
Ubuntu:16.04:LTS
 All versions, plus listed versions
21.4.22-4ubuntu321.4.22-14ubuntu1
 None known
xemacs21-packages
Ubuntu:16.04:LTS
 All versions, plus listed versions
2009.02.17.dfsg.2-2
 None known
emacs25
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
25.2+1-625.2+1-6ubuntu0.1~esm2
 None known
xemacs21
Ubuntu:18.04:LTS
 All versions, plus listed versions
21.4.24-4ubuntu121.4.24-5ubuntu1
 None known
xemacs21-packages
Ubuntu:18.04:LTS
 All versions, plus listed versions
2009.02.17.dfsg.2-4
 None known
emacs
Ubuntu:Pro:20.04:LTS
 before 1:26.3+1-1ubuntu2+esm2, plus listed versions
1:26.3+1-1ubuntu11:26.3+1-1ubuntu21:26.3+1-1ubuntu2+esm1
1:26.3+1-1ubuntu2+esm2
xemacs21
Ubuntu:20.04:LTS
 All versions, plus listed versions
21.4.24-8build121.4.24-9
 None known
xemacs21-packages
Ubuntu:20.04:LTS
 All versions, plus listed versions
2009.02.17.dfsg.2-42009.02.17.dfsg.2-5
 None known
xemacs21
Ubuntu:22.04:LTS
 All versions, plus listed versions
21.4.24-9ubuntu2
 None known
xemacs21-packages
Ubuntu:22.04:LTS
 All versions, plus listed versions
2009.02.17.dfsg.2-5
 None known
emacs
Ubuntu:Pro:22.04:LTS
 before 1:27.1+1-3ubuntu5.2+esm1, plus listed versions
1:27.1+1-3ubuntu31:27.1+1-3ubuntu51:27.1+1-3ubuntu5.11:27.1+1-3ubuntu5.2
1:27.1+1-3ubuntu5.2+esm1
xemacs21
Ubuntu:24.04:LTS
 All versions, plus listed versions
21.4.24-1221.4.24-12build221.4.24-12build3
 None known
xemacs21-packages
Ubuntu:24.04:LTS
 All versions, plus listed versions
2009.02.17.dfsg.3-22009.02.17.dfsg.3-3
 None known
emacs
Ubuntu:Pro:24.04:LTS
 before 1:29.3+1-1ubuntu2+esm3, plus listed versions
1:29.1+1-5ubuntu11:29.2+1-1ubuntu11:29.2+1-2ubuntu41:29.3+1-1ubuntu21:29.3+1-1ubuntu2+esm1
1:29.3+1-1ubuntu2+esm3
xemacs21
Ubuntu:25.10
 All versions, plus listed versions
21.4.24-12build3
 None known
xemacs21-packages
Ubuntu:25.10
 All versions, plus listed versions
2009.02.17.dfsg.3-3
 None known
xemacs21
Ubuntu:26.10
 All versions, plus listed versions
21.4.24-12build3
 None known
xemacs21-packages
Ubuntu:26.10
 All versions, plus listed versions
2009.02.17.dfsg.3-3build1
 None known
xemacs21
Ubuntu:26.04:LTS
 All versions, plus listed versions
21.4.24-12build3
 None known
xemacs21-packages
Ubuntu:26.04:LTS
 All versions, plus listed versions
2009.02.17.dfsg.3-32009.02.17.dfsg.3-3build1
 None known
emacs
openSUSE:Tumbleweed
 before 29.4-11.1
29.4-11.1

History

History
RecordedChangedSources
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-53920 is a high vulnerability (CVSS 7.8) in Gnu Emacs, published November 27, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.60%, the 48th percentile. Fixed in emacs 1:26.1-15.el8_10.

References

Show 42 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open