本頁列出影響 gnu ed 的已公開 CVE 漏洞（透過 NVD CPE 關聯）。每列包含嚴重程度評分、摘要與發布日期，便於識別與分析安全議題。
| CVE | 摘要 | 來源 | 最高 CVSS | EPSS % | 公開時間 | 更新時間 |
|---|---|---|---|---|---|---|
| CVE-2017-5357 | regex.c in GNU ed before 1.14.1 allows attackers to cause a denial of service (crash) via a malformed command, which triggers an invalid free. | [email protected] | 7.5 | 3.04% | 2017-02-16 | 2026-06-16 |
| CVE-2008-3916 | Heap-based buffer overflow in the strip_escapes function in signal.c in GNU ed before 1.0 allows context-dependent or user-assisted attackers to execute arbitrary code via a long filename. NOTE: since ed itself does not typically run with special privileges, this issue only crosses privilege boundaries when ed is invoked as a third-party component. | [email protected] | 9.3 | 3.60% | 2008-09-04 | 2026-06-16 |
| CVE-2006-6939 | GNU ed before 0.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files, possibly in the open_sbuf function. | [email protected] | 4.6 | 0.37% | 2007-01-16 | 2026-06-16 |
| CVE-2000-1137 | GNU ed before 0.2-18.1 allows local users to overwrite the files of other users via a symlink attack. | [email protected] | 4.6 | 0.39% | 2001-01-09 | 2026-06-16 |