CVE-2008-2142: GNU Emacs

Medium severity, CVSS 6.8. EPSS: 3.7% chance of exploitation in the next 30 days.

Emacs 21 and XEmacs automatically load and execute .flc (fast lock) files that are associated with other files that are edited within Emacs, which allows user-assisted attackers to execute arbitrary code.

Affected products

• GNU Emacs: version 21.3.1 only
• GNU Xemacs: any version

Published 2008-05-12. Last modified 2026-06-16.