Approved changes feed: RSS · Atom
cpe:2.3:a:gnu:emacs:-:*:*:*:*:*:*:*
part: a version: - update: *
| Vendor | Gnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9) |
|---|---|
| Product | Emacs (223f81ad-80f4-546f-aa33-c291e57c1e94) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/emacs |
purl2cpe | 2026-06-01 10:11:55.550342 |
pkg:deb/ubuntu/emacs |
purl2cpe | 2026-06-01 10:11:55.550345 |
pkg:gnu/emacs |
purl2cpe | 2026-06-01 10:11:55.550347 |
pkg:rpm/fedora/emacs |
purl2cpe | 2026-06-01 10:11:55.550350 |
pkg:rpm/opensuse/emacs |
purl2cpe | 2026-06-01 10:11:55.550353 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-53920 |
vulnerable | 2026-06-08 06:54:15.692613 |
Details available
In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. (This unsafe expansion also occurs if a user chooses to enable on-the-fly diagnosis that byte compiles untrusted Emacs Lisp source code.)
Published: 2024-11-27T00:00:00.000Z
Updated: 2025-11-03T20:48:26.643Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39331 |
vulnerable | 2026-06-08 06:41:49.083091 |
Details available
In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe function, such as shell-command-to-string. This affects Org Mode before 9.7.5.
Published: 2024-06-23T00:00:00.000Z
Updated: 2024-08-22T03:55:10.601Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1103 |
not_vulnerable | 2026-06-08 05:00:47.481200 |
Details available
emacs/notmuch-mua.el in Notmuch before 0.11.1, when using the Emacs interface, allows user-assisted remote attackers to read arbitrary files via crafted MML tags, which are not properly quoted in an email reply cna cause the files to be attached to the message.
Published: 2012-09-25T23:00:00.000Z
Updated: 2024-09-16T22:56:49.354Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.