CVE-2010-0825: GNU Emacs

Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days.

lib-src/movemail.c in movemail in emacs 22 and 23 allows local users to read, modify, or delete arbitrary mailbox files via a symlink attack, related to improper file-permission checks.

Affected products

• GNU Emacs: version 22.1 only; version 22.2 only; version 22.3 only; version 23.1 only

Published 2010-04-05. Last modified 2026-06-16.