Lucene search
K

1677 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.6 views

Astra Linux - уязвимость в emacs

In Emacs versions before 29.3, the Org mode considers the contents of remote files to be trustworthy. This affects Org Mode in versions prior to 9.6.23...

7.1CVSS7.1AI score0.0003EPSS
Exploits0References2
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.8 views

Astra Linux - уязвимость в emacs

In Emacs versions before 29.3, arbitrary Lisp code is evaluated as part of enabling the Org mode. This affects Org Mode in versions prior to 9.6.23...

7.8CVSS7.3AI score0.00054EPSS
Exploits0References1
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.3 views

Astra Linux - уязвимость в emacs

In Emacs versions before 29.3, LaTeX preview is enabled by default for e-mail attachments...

2.8CVSS6.4AI score0.00017EPSS
Exploits0References2
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.2 views

Astra Linux - уязвимость в emacs

In Emacs versions before 29.3, Gnus treats inline MIME contents as trusted...

5.5CVSS6.7AI score0.00027EPSS
Exploits0References2
OPENSUSE Linux
OPENSUSE Linux
added 2026/05/19 12:0 a.m.5 views

Security update for emacs (moderate)

openSUSE security update: security update for emacs ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20759-1 Rating: moderate References: bsc1262007 bsc1262611 Cross-References: CVE-2026-6861 CVSS scores: CVE-2026-6861 SUSE : 6.1...

6.8CVSS5.8AI score0.00021EPSS
Exploits0References2
OSV
OSV
added 2026/05/16 8:56 a.m.1 views

OPENSUSE-SU-2026:20759-1 Security update for emacs

This update for emacs fixes the following issue: - CVE-2026-6861: memory corruption when processing specially crafted SVG CSS data bsc1262611. - Build with tree-sitter-0.26.8 security update bsc1262007...

7.1CVSS5.8AI score0.00021EPSS
Exploits0References3
OSV
OSV
added 2026/05/16 8:54 a.m.1 views

SUSE-SU-2026:21801-1 Security update for emacs

This update for emacs fixes the following issue: - CVE-2026-6861: memory corruption when processing specially crafted SVG CSS data bsc1262611. - Build with tree-sitter-0.26.8 security update bsc1262007...

7.1CVSS5.8AI score0.00021EPSS
Exploits0References4
CBLMariner
CBLMariner
added 2026/05/09 3:31 a.m.5 views

CVE-2026-6861 affecting package emacs for versions less than 29.4-4

CVE-2026-6861 affecting package emacs for versions less than 29.4-4. A patched version of the package is available...

7.1CVSS5.8AI score0.00021EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2026/05/05 12:0 a.m.1 views

Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2026-6861)

The version of CBL-Mariner Releases installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2026-6861 advisory. - A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs...

7.1CVSS5.8AI score0.00021EPSS
Exploits0References1
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.5 views

Astra Linux - уязвимость в emacs

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters...

7.8CVSS7.7AI score0.00052EPSS
Exploits0References1
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.7 views

Astra Linux - уязвимость в emacs

In elisp-mode.el of GNU Emacs prior to version 30.1, a user who chooses to invoke elisp-completion-at-point for code completion on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion, allowing attackers to execute arbitrary code. This unsafe expansion also occurs if a user...

7.8CVSS7.5AI score0.00053EPSS
Exploits0References2
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.2 views

Astra Linux - уязвимость в emacs

GNU Emacs version 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file. This is because lib-src/etags.c uses the system’s C library function in its implementation of the ctags program. For example, a victim might use the “ctags ” command as suggeste...

7.8CVSS7.2AI score0.00051EPSS
Exploits0References1
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.3 views

Astra Linux - уязвимость в emacs

A command injection flaw was discovered in the text editor Emacs. This flaw could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking users into visiting a specially crafted website or an HTTP URL with a redirec...

8.8CVSS7.6AI score0.01295EPSS
Exploits0References2
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.3 views

Astra Linux - уязвимость в emacs

GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C library function in its implementation of the etags program. For example, a victim may use the "etags -u " command suggested in the eta...

9.8CVSS7.6AI score0.00447EPSS
Exploits0References1
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.1 views

Astra Linux - уязвимость в emacs

In Emacs versions before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %... link abbreviation even when it specifies an unsafe function, such as shell-command-to-string. This issue affects Org Mode before 9.7.5...

9.8CVSS7.2AI score0.00441EPSS
Exploits0References2
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.4 views

Astra Linux - уязвимость в emacs

A vulnerability was discovered in GNU Emacs through version 28.2. The htmlfontify.el script has a command injection vulnerability. In the hfy-istext-command function, the parameter file and parameter srcdir parameters come from external inputs, and these parameters are not escaped properly. If a...

7.8CVSS7.1AI score0.00106EPSS
Exploits0References1
OSV
OSV
added 2026/05/03 9:55 a.m.4 views

OESA-2026-2131 emacs security update

Emacs is the extensible, customizable, self-documenting real-time display editor. At its core is an interpreter for Emacs Lisp, a dialect of the Lisp programming language with extensions to support text editing. And it is an entire ecosystem of functionality beyond text editing, including a proje...

7.1CVSS5.7AI score0.00021EPSS
Exploits0References2
OSV
OSV
added 2026/05/03 9:55 a.m.0 views

OESA-2026-2130 emacs security update

Emacs is the extensible, customizable, self-documenting real-time display editor. At its core is an interpreter for Emacs Lisp, a dialect of the Lisp programming language with extensions to support text editing. And it is an entire ecosystem of functionality beyond text editing, including a proje...

7.1CVSS5.8AI score0.00021EPSS
Exploits0References2
OSV
OSV
added 2026/05/03 9:55 a.m.2 views

OESA-2026-2129 emacs security update

Emacs is the extensible, customizable, self-documenting real-time display editor. At its core is an interpreter for Emacs Lisp, a dialect of the Lisp programming language with extensions to support text editing. And it is an entire ecosystem of functionality beyond text editing, including a proje...

7.1CVSS5.7AI score0.00021EPSS
Exploits0References2
Fedora
Fedora
added 2026/05/01 3:12 a.m.2 views

[SECURITY] Fedora 44 Update: emacs-30.2-23.fc44

GNU Emacs is a powerful, customizable, self-documenting, modeless text editor. It contains special code editing features, a scripting language elisp, and the capability to read mail, news, and more without leaving the editor...

7.1CVSS5.3AI score0.00021EPSS
Exploits0
Rows per page
Query Builder