Approved changes feed: RSS · Atom
cpe:2.3:a:gnu:emacs:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Gnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9) |
|---|---|
| Product | Emacs (223f81ad-80f4-546f-aa33-c291e57c1e94) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/emacs |
purl2cpe | 2026-06-01 10:11:55.550340 |
pkg:deb/ubuntu/emacs |
purl2cpe | 2026-06-01 10:11:55.550343 |
pkg:gnu/emacs |
purl2cpe | 2026-06-01 10:11:55.550346 |
pkg:rpm/fedora/emacs |
purl2cpe | 2026-06-01 10:11:55.550349 |
pkg:rpm/opensuse/emacs |
purl2cpe | 2026-06-01 10:11:55.550352 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-6861 |
vulnerable | 2026-06-08 08:07:05.137742 |
Emacs: emacs: memory corruption vulnerability when processing svg css
MEDIUM (6.1)
A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG (Scalable Vector Graphics) CSS (Cascading Style Sheets) data. A local user could exploit this by convincing a victim to open a malicious SVG file, which may lead to a denial of service (DoS) or potentially information disclosure.
Published: 2026-04-22T13:39:40.887Z
Updated: 2026-04-22T15:59:40.836Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-53920 |
vulnerable | 2026-06-08 06:54:15.693592 |
Details available
In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. (This unsafe expansion also occurs if a user chooses to enable on-the-fly diagnosis that byte compiles untrusted Emacs Lisp source code.)
Published: 2024-11-27T00:00:00.000Z
Updated: 2025-11-03T20:48:26.643Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39331 |
vulnerable | 2026-06-08 06:41:49.084214 |
Details available
In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe function, such as shell-command-to-string. This affects Org Mode before 9.7.5.
Published: 2024-06-23T00:00:00.000Z
Updated: 2024-08-22T03:55:10.601Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30205 |
vulnerable | 2026-06-08 06:35:29.244626 |
Details available
In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23.
Published: 2024-03-25T00:00:00.000Z
Updated: 2024-12-03T16:41:24.224Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30204 |
vulnerable | 2026-06-08 06:35:29.243824 |
Details available
In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments.
Published: 2024-03-25T00:00:00.000Z
Updated: 2024-11-04T16:34:51.409Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30203 |
vulnerable | 2026-06-08 06:35:29.242719 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30202 |
vulnerable | 2026-06-08 06:35:29.240587 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27986 |
vulnerable | 2026-06-08 05:57:42.670375 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27985 |
vulnerable | 2026-06-08 05:57:42.669864 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-48339 |
vulnerable | 2026-06-08 05:51:34.303463 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-48338 |
vulnerable | 2026-06-08 05:51:34.302936 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-48337 |
vulnerable | 2026-06-08 05:51:34.301488 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45939 |
vulnerable | 2026-06-08 05:50:37.615779 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-14482 |
vulnerable | 2026-06-08 05:08:50.007381 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1000383 |
vulnerable | 2026-06-08 05:08:34.471573 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3424 |
vulnerable | 2026-06-08 05:05:32.573848 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3423 |
vulnerable | 2026-06-08 05:05:32.572962 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3422 |
vulnerable | 2026-06-08 05:05:32.571852 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3421 |
vulnerable | 2026-06-08 05:05:32.558499 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-0035 |
vulnerable | 2026-06-08 04:59:35.671256 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-6109 |
vulnerable | 2026-06-08 04:50:07.816675 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-5795 |
vulnerable | 2026-06-08 04:50:07.039596 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-0100 |
vulnerable | 2026-06-08 04:48:11.343811 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.