EM
Product
Emacs
42
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 2High 15Medium 6Low 1
Watch
Add Emacs to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-39331 | 9.8 | Jun 23 | In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe function, such as shell-command-to-string Affected: before 29.4 |
| CVE-2022-48337 | 9.8 | Feb 20 | GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C library function… Affected: through 28.2 |
Showing 2