CVE-2023-2491

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A flaw was found in the Emacs text editor. Processing a specially crafted org-mode code with the "org-babel-execute:latex" function in ob-latex.el can result in arbitrary command execution. This CVE exists because of a CVE-2023-28617 security regression for the emacs package in Red Hat Enterprise Linux 8.8 and Red Hat Enterprise Linux 9.2.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-77

Affected software

No affected versions have been published.

Timeline

Published
May 17, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-249107.8Windows Graphics Component Elevation of Privilege VulnerabilityCVE-2023-249114.3Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityCVE-2023-249127.8Windows Graphics Component Elevation of Privilege VulnerabilityCVE-2023-249138.8Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityCVE-2023-249147.0Win32k Elevation of Privilege VulnerabilityCVE-2023-249195.4Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityCVE-2023-24927.2The QueryWall: Plug'n Play Firewall WordPress plugin through 1.1.1 does not properly sanitise and escape a parameter before using it in a SQCVE-2023-249205.4Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityCVE-2023-249215.4Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityCVE-2023-249226.5Microsoft Dynamics 365 (On-Premises) Information Disclosure VulnerabilityCVE-2023-249235.5Microsoft OneDrive for Android Information Disclosure VulnerabilityCVE-2023-249248.8Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVE-2023-2491: High severity, CVSS 7.8 | Vulnix