Critical Security Update for Emacs: Addressing Multiple Vulnerabilities
Summary
RHSA-2026:84591: Red Hat Security Advisory: emacs security update. Affects emacs versions < 1:29.4-14.el10_2.3. Fixed in 1:29.4-14.el10_2.3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Emacs is a highly extensible and customizable text editor, widely used by developers and writers for its powerful features and flexibility. It supports various programming languages and offers a rich ecosystem of plugins. However, recent vulnerabilities have been identified that could potentially compromise the security of systems running affected versions of Emacs.
Vulnerability Detail
The vulnerabilities identified in Emacs (CVE-2026-77219, CVE-2026-79992, CVE-2026-96442) stem from flaws in the handling of certain inputs, which could allow an attacker to execute arbitrary code or cause a denial of service. These vulnerabilities can lead to significant security risks, including unauthorized access to sensitive data and system instability. The CVSS score of this vulnerability is 7.8, indicating a high severity level that necessitates immediate attention.
How To Fix
Minimum fixed version
1:29.4-14.el10_2.3
This is the first release that contains the fix.
sudo dnf update emacsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit the execution of untrusted scripts or disable certain features in Emacs that may expose the system to these vulnerabilities. However, the best course of action is to apply the patch as soon as possible.
Conclusion
In summary, the recent vulnerabilities discovered in Emacs pose significant security risks that require immediate attention. Users are strongly encouraged to update to the latest patched version to mitigate these risks and ensure the security of their systems.
See every vulnerability recorded for emacs →
FAQ
The vulnerabilities include issues that could allow arbitrary code execution and denial of service, affecting the stability and security of the application.
You can check your version of Emacs by running 'emacs --version' in the terminal. Additionally, you can use Vulert's playground to monitor for vulnerabilities.
If an immediate update is not possible, consider implementing workarounds such as restricting the execution of untrusted scripts.
Detailed information about the vulnerabilities can be found in the Red Hat Security Advisory and the respective CVE entries.
Vulert uses a manifest file like package-lock.json to monitor and alert in real-time for open-source vulnerabilities, providing insights without requiring code access.
Related vulnerabilities
Recent vulnerabilities recorded for emacs.
