CVE security advisories and vulnerability history for emacs by gnu.
42
Total CVEs
Published
0
In CISA KEV
Exploited in the wild
4
Public exploits
PoC or exploit code
6.2
Avg CVSS
2000–2026
Last updated
Overview
gnu emacs has 42 published CVE records since 2000, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 4 have a known public exploit. The average CVSS base score across scored CVEs is 6.2.
This page aggregates every publicly disclosed vulnerability (CVE) affecting gnu emacs, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include android, debian linux, mandrake linux, mandrake linux corporate server, x86.
Severity and exploitation
How the CVSS severity of gnu emacs's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical4
High15
Medium15
Low8
In CISA’s Known Exploited Vulnerabilities catalog
0
None of gnu emacs's CVEs are currently listed in CISA's KEV catalog.
Public exploits
4
4 of gnu emacs's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every gnu emacs version named in a CVE, then pick one to see only the CVEs that affect it.
Specific versions
emacs-19.347 CVEs
emacs-20.17 CVEs
emacs-20.27 CVEs
emacs-20.37 CVEs
emacs-20.47 CVEs
emacs-pretest-21.0.1007 CVEs
emacs-pretest-21.0.1017 CVEs
emacs-pretest-21.0.1027 CVEs
emacs-pretest-21.0.1037 CVEs
emacs-pretest-21.0.1047 CVEs
emacs-pretest-21.0.1057 CVEs
Common weakness types
The CWE weakness categories most often found in gnu emacs CVEs. Follow any weakness for its full explanation.
gnu emacs has 42 published CVE records since 2000.
How many gnu emacs CVEs are in CISA KEV?
None of gnu emacs's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for gnu emacs vulnerabilities?
Yes — 4 of gnu emacs's CVEs have a known public exploit.
Which versions of gnu emacs are affected?
116 distinct gnu emacs versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in gnu emacs CVEs?
gnu emacs's CVEs most often map to these CWE weakness types: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-94 (Improper Control of Generation of Code ('Code Injection')), CWE-190 (Integer Overflow or Wraparound), CWE-193 (Off-by-one Error).
How many critical gnu emacs vulnerabilities are there?
gnu emacs has 4 critical and 15 high-severity CVEs.
What is the average severity of gnu emacs CVEs?
The average CVSS base score across gnu emacs's scored CVEs is 6.2.