In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. (This unsafe expansion also occurs if a user chooses to enable on-the-fly diagnosis that byte compiles untrusted Emacs Lisp source code.)
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade emacsUpgrade emacs-commonUpgrade emacs-terminalUpgrade emacs-filesystemUpgrade emacs-noxUpgrade emacs-lucid | May 13, 2025 | Nov 27, 2024 |
| Amazon Linux Ami 2 | — | Upgrade emacsUpgrade emacs-filesystemUpgrade emacs-terminalUpgrade emacs-develUpgrade emacs-commonUpgrade emacs-lucidUpgrade emacs-debuginfoUpgrade emacs-nox | Feb 26, 2025 | Nov 27, 2024 |
| Amazon_linux_2023 | — | Upgrade emacs-noxUpgrade emacs-terminalUpgrade emacs-lucid-debuginfoUpgrade emacs-filesystemUpgrade emacs-nox-debuginfoUpgrade emacsUpgrade emacs-develUpgrade emacs-commonUpgrade emacs-lucidUpgrade emacs-common-debuginfoUpgrade emacs-debuginfoUpgrade emacs-debugsource | Feb 26, 2025 | Nov 27, 2024 |
| Debian | — | Upgrade emacs | Feb 28, 2025 | Nov 27, 2024 |
| Freebsd | — | Upgrade emacs-noxUpgrade emacs-develUpgrade emacs-cannaUpgrade emacsUpgrade emacs-waylandUpgrade emacs-devel-nox | Feb 25, 2025 | Feb 24, 2025 |
| Gentoo Linux | — | Upgrade app-editors/emacs. | Jun 13, 2025 | Nov 27, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade emacs-filesystem | Jul 11, 2025 | Nov 27, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade emacs-filesystem | Aug 13, 2025 | Jul 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade emacs-filesystem | Jul 21, 2025 | Nov 27, 2024 |
| Huawei Euleros 2_0_sp13 | — | Upgrade emacs-filesystem | Aug 13, 2025 | Jul 10, 2025 |
| Oracle_linux | — | Upgrade emacsUpgrade emacs-commonUpgrade emacs-filesystemUpgrade emacs-noxUpgrade emacs-lucidUpgrade emacs-terminal | May 13, 2025 | Nov 27, 2024 |
| Redhat_linux | — | Upgrade emacs-lucid-debuginfoUpgrade emacs-common-debuginfoUpgrade emacs-filesystemUpgrade emacsUpgrade emacs-nox-debuginfoUpgrade emacs-terminalUpgrade emacs-lucidUpgrade emacs-noxUpgrade emacs-debuginfoUpgrade emacs-commonNo solution existsUpgrade emacs-debugsource | May 13, 2025 | Nov 27, 2024 |
| Rocky_linux | — | Upgrade emacs-common-debuginfoUpgrade emacsUpgrade emacs-nox-debuginfoUpgrade emacs-commonUpgrade emacs-lucidUpgrade emacs-debugsourceUpgrade emacs-noxUpgrade emacs-debuginfoUpgrade emacs-lucid-debuginfo | Jul 31, 2025 | Jul 29, 2025 |
| Ubuntu | — | Upgrade emacs-pgtk (Ubuntu Pro)Upgrade emacs (Ubuntu Pro)Upgrade emacs-gtk (Ubuntu Pro)Upgrade emacs-el (Ubuntu Pro)Upgrade emacs-lucid (Ubuntu Pro)Upgrade emacs-nox (Ubuntu Pro)Upgrade emacs-common (Ubuntu Pro)Upgrade emacs-bin-common (Ubuntu Pro) | Feb 5, 2026 | Feb 4, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Nov 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub