CVE-2025-1244

Highest-risk unexploited with PoCs

Exploit code exists, no confirmed in-the-wild activity, ranked by EPSS

Actively Exploited

Confirmed exploited in the wild, sorted by most recently updated

CVSS 8.8EPSS 3%

Published 2025-02-12Updated 2025-04-28

Media 571

Vulnerability details

A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking users into visiting a specially crafted website or an HTTP URL with a redirect.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CNAredhat

EPSS score history

Sources

3 links

PoC links are not available for guest users. Login to view them.

CVEShield RedHat Vuln DB CVE Organization

Profile

CVSS

8.8

EPSS

Published

2025-02-12

Updated

2025-04-28

CNA

redhat

Vendors

Red Hat

16 products

CPEs

cpe:/o:redhat:rhel_els:7

cpe:/a:redhat:enterprise_linux:8::appstream

cpe:/o:redhat:enterprise_linux:8::baseos

cpe:/a:redhat:rhel_aus:8.2::appstream

cpe:/o:redhat:rhel_aus:8.2::baseos

cpe:/a:redhat:rhel_aus:8.4::appstream

cpe:/a:redhat:rhel_e4s:8.4::appstream

cpe:/a:redhat:rhel_tus:8.4::appstream

cpe:/o:redhat:rhel_aus:8.4::baseos

cpe:/o:redhat:rhel_e4s:8.4::baseos

cpe:/o:redhat:rhel_tus:8.4::baseos

cpe:/a:redhat:rhel_aus:8.6::appstream

cpe:/a:redhat:rhel_e4s:8.6::appstream

cpe:/a:redhat:rhel_tus:8.6::appstream

cpe:/o:redhat:rhel_aus:8.6::baseos

cpe:/o:redhat:rhel_e4s:8.6::baseos

cpe:/o:redhat:rhel_tus:8.6::baseos

cpe:/a:redhat:rhel_eus:8.8::appstream

cpe:/o:redhat:rhel_eus:8.8::baseos

cpe:/a:redhat:enterprise_linux:9::appstream

cpe:/a:redhat:rhel_e4s:9.0::appstream

cpe:/a:redhat:rhel_eus:9.2::appstream

cpe:/a:redhat:rhel_eus:9.4::appstream

cpe:/a:redhat:openshift_builds:1.3::el9

cpe:/o:redhat:enterprise_linux:10

cpe:/o:redhat:enterprise_linux:6

cpe:/o:redhat:rhivos:1

Vulnerability dashboard

Highest-risk unexploited with PoCs

Actively Exploited

Recently Updated