CVE-2023-27986

CVE-2023-27986 affects Emacs 28.1–28.2, where emacsclient-mail.desktop can be exploited via a crafted mailto: URI containing unescaped double-quote characters to trigger Emacs Lisp code injection. The fixed version is 29.0.90. CVSS v3.1 (NVD) indicates a High impact with local attack vector and u...

CVE-2023-27985

CVE-2023-27985 affects Emacs up to version 28.2, specifically emacsclient-mail.desktop, where a crafted mailto: URI enables shell command injections due to Desktop Entry Specification noncompliance. The issue is documented as fixed in Emacs 29.0.90. Affected products/versions inferred from multip...

CVE-2026-6861

A CVE-2026-6861 vulnerability affects GNU Emacs and relates to memory corruption when Emacs processes specially crafted SVG CSS data. A local attacker could entice a user to open a malicious SVG file, which may lead to a denial of service or information disclosure. Public references in the connec...