Latest gnu emacs Vulnerabilities

● CVE-2023-2491

A flaw was found in the Emacs text editor. Processing a specially crafted org-mode code with the "org-babel-execute:latex" function in ob-latex.el can result in arbitrary command execution. This CVE e...

GNU Emacs=26.1-9.el8

GNU Emacs=27.2-8.el9

Redhat Enterprise Linux=8.0

Redhat Enterprise Linux=9.0

Redhat Enterprise Linux Eus=8.8

Redhat Enterprise Linux Eus=9.2

and 3 more

● CVE-2023-27986

emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to Emacs Lisp code injections through a crafted mailto: URI with unescaped double-quote characters. It is fixed in 29.0.90.

GNU Emacs>=28.1<=28.2

● CVE-2023-27985

emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to shell command injections through a crafted mailto: URI. This is related to lack of compliance with the Desktop Entry Specification....

GNU Emacs>=28.1<=28.2

● CVE-2022-48338

An issue was discovered in GNU Emacs through 28.2. In ruby-mode.el, the ruby-find-library-file function has a local command injection vulnerability. The ruby-find-library-file function is an interacti...

GNU Emacs<=28.2

debian/emacs<=1:27.1+1-3.1+deb11u1

● CVE-2022-48337

GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C library function in its implementation...

debian/emacs<=1:26.1+1-3.2+deb10u2<=1:27.1+1-3.1+deb11u1

GNU Emacs<=28.2

Debian Debian Linux=11.0

● CVE-2022-48339

GNU Emacs could allow a local attacker to execute arbitrary commands on the system, caused by a flaw in the hfy-istext-command function. By sending a specially-crafted request, an attacker could explo...

debian/emacs<=1:26.1+1-3.2+deb10u2<=1:27.1+1-3.1+deb11u1

GNU Emacs<=28.2

IBM QRadar SIEM<=7.5.0 - 7.5.0 UP6

● CVE-2022-45939

GNU Emacs<=28.2

Debian Debian Linux=10.0

Debian Debian Linux=11.0

Fedoraproject Fedora=36

Fedoraproject Fedora=37

debian/emacs<=1:26.1+1-3.2+deb10u2

and 1 more

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.