CVE-2024-30202: GNU Emacs

High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days.

In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode before 9.6.23.

Affected products

• GNU Emacs: before 29.3 (fixed in 29.3)
• GNU Org Mode: before 9.6.23 (fixed in 9.6.23)

Published 2024-03-25. Last modified 2026-06-17.