CVE-2024-30203

In Emacs versions prior to 29.3 , the Gnus component incorrectly treats inline MIME contents as trusted. This vulnerability stems from the MIME protocol implementation's inclusion of functions from unverified and uncontrolled areas. Exploitation of this flaw could allow a perpetrator to induce a ...

CVE-2024-30204

In Emacs versions prior to 29.3 , LaTeX preview is enabled by default for e-mail attachments. This configuration flaw allows for potential security risks when handling untrusted content. The vulnerability is mitigated by ensuring that LaTeX preview is disabled for e-mail attachments when untruste...

CVE-2023-28617

CVE-2023-28617 affects Org-Mode's ob-latex.el in GNU Emacs (pre-9.6.1) where org-babel-execute:latex can be triggered to run attacker-controlled commands if a file or directory name contains shell metacharacters. The issue is a code-injection path via shell metacharacters in filenames, leading to...

CVE-2024-30205

The GNU Emacs text editor contains a vulnerability where Org mode treats the contents of remote files as trusted. This affects Org Mode versions prior to 9.6.23 and Emacs versions before 29.3 . The root cause is the loading of code without checking its integrity, which could allow an attacker to ...

CVE-2024-30202

The GNU Emacs text editor is vulnerable to the execution of arbitrary Lisp code triggered when enabling Org mode . This issue affects Emacs versions prior to 29.3 and specifically impacts Org Mode versions before 9.6.23 . Impact details are not explicitly provided, but the vulnerability allows fo...