In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. (This unsafe expansion also occurs if a user chooses to enable on-the-fly diagnosis that byte compiles untrusted Emacs Lisp source code.)
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-emacsalma-upgrade-emacs-commonalma-upgrade-emacs-filesystemalma-upgrade-emacs-lucidalma-upgrade-emacs-noxalma-upgrade-emacs-terminal | May 13, 2025 | Nov 27, 2024 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-emacsamazon-linux-ami-2-upgrade-emacs-commonamazon-linux-ami-2-upgrade-emacs-debuginfoamazon-linux-ami-2-upgrade-emacs-develamazon-linux-ami-2-upgrade-emacs-filesystemamazon-linux-ami-2-upgrade-emacs-lucidamazon-linux-ami-2-upgrade-emacs-noxamazon-linux-ami-2-upgrade-emacs-terminal | Feb 26, 2025 | Nov 27, 2024 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-emacsamazon-linux-2023-upgrade-emacs-commonamazon-linux-2023-upgrade-emacs-common-debuginfoamazon-linux-2023-upgrade-emacs-debuginfoamazon-linux-2023-upgrade-emacs-debugsourceamazon-linux-2023-upgrade-emacs-develamazon-linux-2023-upgrade-emacs-filesystemamazon-linux-2023-upgrade-emacs-lucidamazon-linux-2023-upgrade-emacs-lucid-debuginfoamazon-linux-2023-upgrade-emacs-noxamazon-linux-2023-upgrade-emacs-nox-debuginfoamazon-linux-2023-upgrade-emacs-terminal | Feb 26, 2025 | Nov 27, 2024 | |
| Debian | debian-upgrade-emacs | Feb 28, 2025 | Nov 27, 2024 | |
| Freebsd | freebsd-upgrade-package-emacsfreebsd-upgrade-package-emacs-cannafreebsd-upgrade-package-emacs-noxfreebsd-upgrade-package-emacs-waylandfreebsd-upgrade-package-emacs-develfreebsd-upgrade-package-emacs-devel-nox | Feb 25, 2025 | Feb 24, 2025 | |
| Gentoo Linux | gentoo-linux-upgrade-app-editors-emacs | Jun 13, 2025 | Nov 27, 2024 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-emacs-filesystem | Jul 11, 2025 | Nov 27, 2024 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-emacs-filesystem | Aug 13, 2025 | Jul 10, 2025 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-emacs-filesystem | Jul 21, 2025 | Nov 27, 2024 | |
| Huawei Euleros 2_0_sp13 | huawei-euleros-2_0_sp13-upgrade-emacs-filesystem | Aug 13, 2025 | Jul 10, 2025 | |
| Oracle_linux | — | oracle-linux-upgrade-emacsoracle-linux-upgrade-emacs-commonoracle-linux-upgrade-emacs-filesystemoracle-linux-upgrade-emacs-lucidoracle-linux-upgrade-emacs-noxoracle-linux-upgrade-emacs-terminal | May 13, 2025 | Nov 27, 2024 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-emacsredhat-upgrade-emacs-commonredhat-upgrade-emacs-common-debuginforedhat-upgrade-emacs-debuginforedhat-upgrade-emacs-debugsourceredhat-upgrade-emacs-filesystemredhat-upgrade-emacs-lucidredhat-upgrade-emacs-lucid-debuginforedhat-upgrade-emacs-noxredhat-upgrade-emacs-nox-debuginforedhat-upgrade-emacs-terminal | May 13, 2025 | Nov 27, 2024 | |
| Rocky_linux | rocky-upgrade-emacsrocky-upgrade-emacs-commonrocky-upgrade-emacs-common-debuginforocky-upgrade-emacs-debuginforocky-upgrade-emacs-debugsourcerocky-upgrade-emacs-lucidrocky-upgrade-emacs-lucid-debuginforocky-upgrade-emacs-noxrocky-upgrade-emacs-nox-debuginfo | Jul 31, 2025 | Jul 29, 2025 | |
| Ubuntu | ubuntu-pro-upgrade-emacsubuntu-pro-upgrade-emacs-bin-commonubuntu-pro-upgrade-emacs-commonubuntu-pro-upgrade-emacs-elubuntu-pro-upgrade-emacs-gtkubuntu-pro-upgrade-emacs-lucidubuntu-pro-upgrade-emacs-noxubuntu-pro-upgrade-emacs-pgtk | Feb 5, 2026 | Feb 4, 2026 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jul 2, 2025 | Nov 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub