CVE-2024-30203

In Emacs versions prior to 29.3 , the Gnus component incorrectly treats inline MIME contents as trusted. This vulnerability stems from the MIME protocol implementation's inclusion of functions from unverified and uncontrolled areas. Exploitation of this flaw could allow a perpetrator to induce a ...

CVE-2024-30204

In Emacs versions prior to 29.3 , LaTeX preview is enabled by default for e-mail attachments. This configuration flaw allows for potential security risks when handling untrusted content. The vulnerability is mitigated by ensuring that LaTeX preview is disabled for e-mail attachments when untruste...

CVE-2024-39331

In Emacs versions prior to 29.4 , a vulnerability exists where the org-link-expand-abbrev function in lisp/ol.el expands a %(...) link abbreviation even when it specifies an unsafe function, such as shell-command-to-string. This specifically affects Org Mode before version 9.7.5 . The flaw allows...

CVE-2024-53920

GNU Emacs versions prior to 30.1 are vulnerable to arbitrary code execution via unsafe Lisp macro expansion in elisp-mode.el . The flaw is triggered when a user invokes elisp-completion-at-point on untrusted Emacs Lisp source code or enables on-the-fly diagnosis , which causes the byte-compilatio...

CVE-2024-30205

The GNU Emacs text editor contains a vulnerability where Org mode treats the contents of remote files as trusted. This affects Org Mode versions prior to 9.6.23 and Emacs versions before 29.3 . The root cause is the loading of code without checking its integrity, which could allow an attacker to ...

CVE-2024-30202

The GNU Emacs text editor is vulnerable to the execution of arbitrary Lisp code triggered when enabling Org mode . This issue affects Emacs versions prior to 29.3 and specifically impacts Org Mode versions before 9.6.23 . Impact details are not explicitly provided, but the vulnerability allows fo...

CVE-2007-6109

CVE-2007-6109 describes a stack-based buffer overflow in Emacs triggered by a large precision value in an integer format specifier to the format function, leading to denial of service (crash) and potentially other impacts. Concrete references in connected docs indicate the vulnerability affects E...