| CVE-2026-108976 |
GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has…
|
7.8
High
|
Oct 11, 2026 |
| CVE-2026-96269 |
GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of…
|
7.5
High
|
Sep 22, 2026 |
| CVE-2026-77219 |
GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak…
|
6.9
Medium
|
Aug 21, 2026 |
| CVE-2026-71394 |
GNU Emacs for Android improperly validates the table header input in sfnt_read_table_directory() in src/sfnt.c
|
5.3
Medium
|
Aug 10, 2026 |
| CVE-2026-71393 |
GNU Emacs for Android is vulnerable to an integer overflow in sfnt_read_name_table() in src/sfnt.c
|
5.3
Medium
|
Aug 10, 2026 |
| CVE-2026-71392 |
GNU Emacs for Android is vulnerable to an integer overflow in the sfnt_read_cmap_format_12() function in src/sfnt.c
|
5.3
Medium
|
Aug 10, 2026 |
| CVE-2026-71391 |
GNU Emacs for Android contains an off-by-one error in the gvar table parser in src/sfnt.c
|
5.3
Medium
|
Aug 10, 2026 |
| CVE-2024-53920 |
In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code…
|
7.8
High
|
Nov 27, 2024 |
| CVE-2024-39331 |
In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe…
|
9.8
Critical
|
Jun 23, 2024 |