gnu emacs

Name: gnu emacs
Brand: gnu

productUS

cpe:2.3:a:gnu:emacs:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

1critical13high8medium7low

updated 2026-10-28

vulnerabilities (35)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2003-1232US	medium5.1	3.01% (87th)	Exploit	no fix	2003-12-31	= 21.2.1
CVE-2007-5795US	medium6.3	0.72% (54th)	Exploit	no fix	2007-11-02	≤ 22.1
CVE-2005-0100US	high7.5	4.33% (91st)	—	no fix	2005-02-07	2 versions
CVE-2017-14482US	high8.8	4.01% (90th)	—	no fix	2017-09-14	≤ 25.2
CVE-2012-3479US	medium6.8	3.74% (90th)	—	no fix	2012-08-25	4 versions
CVE-2008-2142US	medium6.8	3.66% (90th)	—	no fix	2008-05-12	= 21.3.1
CVE-2007-6109US	high10.0	3.04% (87th)	—	no fix	2007-12-07	—
CVE-2014-9483US	high7.5	2.85% (87th)	—	no fix	2017-08-28	= 24.4
CVE-2012-0035US	high9.3	2.30% (83rd)	—	no fix	2012-01-19	22 versions
CVE-2007-2833US	high7.8	1.96% (80th)	—	no fix	2007-06-21	= 21
CVE-2022-48338US	high7.3	1.64% (76th)	—	no fix	2023-02-20	≤ 28.2
CVE-2022-48337US	critical9.8	1.62% (76th)	—	no fix	2023-02-20	≤ 28.2
CVE-2024-39331US	—	1.32% (71st)	—	29.4	2024-06-23	< 29.4
CVE-2022-48339US	high7.8	1.14% (67th)	—	no fix	2023-02-20	≤ 28.2
CVE-2024-30202US	—	1.10% (65th)	—	29.3	2024-03-25	< 29.3
CVE-2023-27985US	high7.8	1.08% (65th)	—	no fix	2023-03-09	28.1 → 28.2
CVE-2022-45939US	high7.8	0.66% (51st)	—	no fix	2022-11-28	≤ 28.2
CVE-2024-53920US	—	0.60% (49th)	—	30.1	2024-11-27	< 30.1
CVE-2024-30203US	—	0.58% (47th)	—	29.3	2024-03-25	< 29.3
CVE-2024-30205US	—OT elevated	0.48% (41st)	—	29.3	2024-03-25	< 29.3
CVE-2024-30204US	—OT elevated	0.47% (41st)	—	29.3	2024-03-25	< 29.3
CVE-2023-27986US	high7.8	0.47% (41st)	—	no fix	2023-03-09	28.1 → 28.2
CVE-2023-2491US	high7.8	0.46% (40th)	—	no fix	2023-05-17	2 versions
CVE-2017-1000383US	medium5.5	0.42% (36th)	—	no fix	2017-10-31	≤ 25.3.0
CVE-2008-1694US	medium4.6	0.40% (34th)	—	no fix	2008-04-22	5 versions
CVE-2000-0269US	low2.1OT elevated	0.36% (30th)	—	no fix	2000-04-18	7 versions
CVE-2014-3424US	low3.3	0.36% (29th)	—	no fix	2014-05-08	25 versions
CVE-2014-3423US	low3.3	0.35% (29th)	—	no fix	2014-05-08	25 versions
CVE-2000-0270US	low3.6OT elevated	0.35% (28th)	—	no fix	2000-04-18	7 versions
CVE-2014-3422US	low3.3	0.34% (28th)	—	no fix	2014-05-08	25 versions
CVE-2014-3421US	low3.3	0.34% (28th)	—	no fix	2014-05-08	25 versions
CVE-2000-0271US	medium4.6OT elevated	0.34% (27th)	—	no fix	2000-04-18	7 versions
CVE-2010-0825US	medium4.4	0.32% (25th)	—	no fix	2010-04-05	4 versions
CVE-2001-1301US	low1.2	0.29% (22nd)	—	no fix	2001-08-07	= 20.4
CVE-2026-6861US	high7.1	0.11% (1st)	—	no fix	2026-04-22	28.1 → 30.2

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-59Improper Link Resolution Before File Access ('Link Following')7 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')7 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')4 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')4 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-349Acceptance of Extraneous Untrusted Data With Trusted Data3 CVEs
CWE-264CWE-2642 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE35 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan