Every CVE Search/ Get API key

CVE-2026-96442

Emacs: emacs: arbitrary code execution in flymake mode

7.8 HighFix available

A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution with the privileges of the user running Emacs.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.20%Unchanged since Sep 24, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.8

Emacs: emacs: arbitrary code execution in flymake mode

A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution with the privileges of the user running Emacs.

Record
CVE-2026-96442
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-94
Updated
2026-11-02
EUVDEUVD-2026-85187 7.8

A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution with the privileges of the user running Emacs.

Record
EUVD-2026-85187
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-05
GitHub AdvisoriesGHSA-hmfx-447r-rwh3 7.8

A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode...

A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution with the privileges of the user running Emacs.

Record
GHSA-hmfx-447r-rwh3
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-94
Updated
2026-11-02
NVD 7.8

A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution with the privileges of the user running Emacs.

Record
CVE-2026-96442
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-94
Updated
2026-11-05
OSV 7.8

Emacs: emacs: arbitrary code execution in flymake mode

A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution with the privileges of the user running Emacs.

Record
CVE-2026-96442
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-94
Updated
2026-11-05
OSVDEBIAN-CVE-2026-96442 7.8

A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution with the privileges of the user running Emacs.

Record
DEBIAN-CVE-2026-96442
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-05
Show 18 moreShow less
OSVOESA-2026-4404 7.8

emacs security update

Emacs is the extensible, customizable, self-documenting real-time display editor. At its core is an interpreter for Emacs Lisp, a dialect of the Lisp programming language with extensions to support text editing. And it is an entire ecosystem of functionality beyond text editing, including a project planner, mail and news reader, debugger interface, calendar, and more.

Security Fix(es):

A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitrary code execution.(CVE-2026-79992)

A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution with the privileges of the user running Emacs.(CVE-2026-96442)

Record
OESA-2026-4404
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-4405 7.8

emacs security update

Emacs is the extensible, customizable, self-documenting real-time display editor. At its core is an interpreter for Emacs Lisp, a dialect of the Lisp programming language with extensions to support text editing. And it is an entire ecosystem of functionality beyond text editing, including a project planner, mail and news reader, debugger interface, calendar, and more.

Security Fix(es):

A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitrary code execution.(CVE-2026-79992)

A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution with the privileges of the user running Emacs.(CVE-2026-96442)

Record
OESA-2026-4405
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-4406 7.8

emacs security update

Emacs is the extensible, customizable, self-documenting real-time display editor. At its core is an interpreter for Emacs Lisp, a dialect of the Lisp programming language with extensions to support text editing. And it is an entire ecosystem of functionality beyond text editing, including a project planner, mail and news reader, debugger interface, calendar, and more.

Security Fix(es):

A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution with the privileges of the user running Emacs.(CVE-2026-96442)

Record
OESA-2026-4406
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-4407 7.8

emacs security update

Emacs is the extensible, customizable, self-documenting real-time display editor. At its core is an interpreter for Emacs Lisp, a dialect of the Lisp programming language with extensions to support text editing. And it is an entire ecosystem of functionality beyond text editing, including a project planner, mail and news reader, debugger interface, calendar, and more.

Security Fix(es):

A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitrary code execution.(CVE-2026-79992)

A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution with the privileges of the user running Emacs.(CVE-2026-96442)

Record
OESA-2026-4407
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:84591 7.8

Red Hat Security Advisory: emacs security update

Record
RHSA-2026:84591
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:85245 7.8

Red Hat Security Advisory: emacs security update

Record
RHSA-2026:85245
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:84591 7.8

Important: emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.

Security Fix(es):

  • emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image (CVE-2026-77219)

  • emacs: emacs: Command injection via crafted filenames in TRAMP (CVE-2026-79992)

  • emacs: Emacs: arbitrary code execution in Flymake mode (CVE-2026-96442)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:84591
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:85245 7.8

Important: emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.

Security Fix(es):

  • emacs: Emacs: arbitrary code execution in Flymake mode (CVE-2026-96442)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:85245
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:90800 7.8

Important: emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.

Security Fix(es):

  • emacs: Emacs: arbitrary code execution in Flymake mode (CVE-2026-96442)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:90800
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-96442 7.8

A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution with the privileges of the user running Emacs.

Record
UBUNTU-CVE-2026-96442
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2026:84591 No score

Important: emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.

Security Fix(es):

  • emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image (CVE-2026-77219)
  • emacs: emacs: Command injection via crafted filenames in TRAMP (CVE-2026-79992)
  • emacs: Emacs: arbitrary code execution in Flymake mode (CVE-2026-96442)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:84591
Updated
2026-11-02
OSVALSA-2026:85245 No score

Important: emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.

Security Fix(es):

  • emacs: Emacs: arbitrary code execution in Flymake mode (CVE-2026-96442)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:85245
Updated
2026-11-02
OSVALSA-2026:90800 No score

Important: emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.

Security Fix(es):

  • emacs: Emacs: arbitrary code execution in Flymake mode (CVE-2026-96442)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:90800
Updated
2026-11-02
OSVAZL-103532 No score

CVE-2026-96442 affecting package emacs for versions less than 29.4-7

A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution with the privileges of the user running Emacs.

Record
AZL-103532
Updated
2026-11-05
OSVopenSUSE-SU-2026:11889-1 No score

emacs-31.1-4.1 on GA media

These are all security issues fixed in the emacs-31.1-4.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11889-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21974-1 No score

Security update for emacs

This update for emacs fixes the following issue:

  • CVE-2026-96442: arbitrary code execution when viewing or editing untrusted text files in modes other than Emacs Lisp mode (bsc#1282390).
Record
openSUSE-SU-2026:21974-1
Updated
2026-11-02
OSVSUSE-SU-2026:23949-1 No score

Security update for emacs

This update for emacs fixes the following issue:

  • CVE-2026-96442: arbitrary code execution when viewing or editing untrusted text files in modes other than Emacs Lisp mode (bsc#1282390).
Record
SUSE-SU-2026:23949-1
Updated
2026-11-02
OSVSUSE-SU-2026:4594-1 No score

Security update for emacs

This update for emacs fixes the following issue:

  • CVE-2026-96442: arbitrary code execution when viewing or editing untrusted text files in modes other than Emacs Lisp mode due to incomplete fix for CVE (bsc#1282390).
Record
SUSE-SU-2026:4594-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
emacs
AlmaLinux:10
From an advisory covering 3 CVEs
 before 1:29.4-14.el10_2.3
1:29.4-14.el10_2.3
emacs-common
AlmaLinux:10
From an advisory covering 3 CVEs
 before 1:29.4-14.el10_2.3
1:29.4-14.el10_2.3
emacs-filesystem
AlmaLinux:10
From an advisory covering 3 CVEs
 before 1:29.4-14.el10_2.3
1:29.4-14.el10_2.3
emacs-lucid
AlmaLinux:10
From an advisory covering 3 CVEs
 before 1:29.4-14.el10_2.3
1:29.4-14.el10_2.3
emacs-nw
AlmaLinux:10
From an advisory covering 3 CVEs
 before 1:29.4-14.el10_2.3
1:29.4-14.el10_2.3
emacs
AlmaLinux:9
 before 1:27.2-18.el9_8.3
1:27.2-18.el9_8.3
emacs-common
AlmaLinux:9
 before 1:27.2-18.el9_8.3
1:27.2-18.el9_8.3
emacs-filesystem
AlmaLinux:9
 before 1:27.2-18.el9_8.3
1:27.2-18.el9_8.3
emacs-lucid
AlmaLinux:9
 before 1:27.2-18.el9_8.3
1:27.2-18.el9_8.3
emacs-nox
AlmaLinux:9
 before 1:27.2-18.el9_8.3
1:27.2-18.el9_8.3
Show 75 moreShow less
Affected packages
PackageAffectedFixed
emacs
AlmaLinux:8
 before 1:26.1-15.el8_10.4
1:26.1-15.el8_10.4
emacs-common
AlmaLinux:8
 before 1:26.1-15.el8_10.4
1:26.1-15.el8_10.4
emacs-filesystem
AlmaLinux:8
 before 1:26.1-15.el8_10.4
1:26.1-15.el8_10.4
emacs-lucid
AlmaLinux:8
 before 1:26.1-15.el8_10.4
1:26.1-15.el8_10.4
emacs-nox
AlmaLinux:8
 before 1:26.1-15.el8_10.4
1:26.1-15.el8_10.4
emacs-terminal
AlmaLinux:8
 before 1:26.1-15.el8_10.4
1:26.1-15.el8_10.4
emacs
Azure Linux:3
 before 29.4-7
29.4-7
emacs
Debian:12
 All versions, plus listed versions
1:28.2+1-151:28.2+1-15+deb12u11:28.2+1-15+deb12u21:28.2+1-15+deb12u31:28.2+1-15+deb12u4
Show 45 moreShow less
1:28.2+1-161:29.1+1-11:29.1+1-21:29.1+1-31:29.1+1-41:29.1+1-51:29.1+1-5~bpo12+11:29.2+1-11:29.2+1-21:29.2+1-2~bpo12+11:29.3+1-11:29.3+1-21:29.3+1-2~bpo12+11:29.3+1-31:29.3+1-3~bpo12+11:29.4+1-11:29.4+1-21:29.4+1-2~bpo12+11:29.4+1-31:29.4+1-41:29.4+1-4~bpo12+11:29.4+1-51:29.4+1-61:29.4+1-6+alpha1:30.1+1-11:30.1+1-21:30.1+1-31:30.1+1-3~bpo12+11:30.1+1-41:30.1+1-4~bpo12+11:30.1+1-51:30.1+1-5~bpo12+11:30.1+1-61:30.1+1-6~bpo12+11:30.1+1-71:30.1+1-81:30.1+1-91:30.2+1-11:30.2+1-101:30.2+1-111:30.2+1-21:30.2+1-31:30.2+1-41:30.2+1-51:30.2+1-6
 None known
emacs
Debian:13
 All versions, plus listed versions
1:30.1+1-61:30.1+1-6+deb13u11:30.1+1-71:30.1+1-81:30.1+1-9
Show 11 moreShow less
1:30.2+1-11:30.2+1-101:30.2+1-111:30.2+1-21:30.2+1-31:30.2+1-41:30.2+1-51:30.2+1-61:30.2+1-71:30.2+1-81:30.2+1-9
 None known
emacs
Debian:14
 All versions, plus listed versions
1:30.1+1-61:30.1+1-71:30.1+1-81:30.1+1-91:30.2+1-1
Show 10 moreShow less
1:30.2+1-101:30.2+1-111:30.2+1-21:30.2+1-31:30.2+1-41:30.2+1-51:30.2+1-61:30.2+1-71:30.2+1-81:30.2+1-9
 None known
emacs
openEuler:24.03-LTS-SP3
From an advisory covering 2 CVEs
 before 29.1-10.oe2403sp3
29.1-10.oe2403sp3
emacs
openEuler:24.03-LTS-SP4
From an advisory covering 2 CVEs
 before 29.1-11.oe2403sp4
29.1-11.oe2403sp4
emacs
openEuler:22.03-LTS-SP4
 before 27.2-20.oe2203sp4
27.2-20.oe2203sp4
emacs
openEuler:24.03-LTS-SP1
From an advisory covering 2 CVEs
 before 29.1-10.oe2403sp1
29.1-10.oe2403sp1
emacs
Red Hat:enterprise_linux:10.2
From an advisory covering 3 CVEs
 before 1:29.4-14.el10_2.3
1:29.4-14.el10_2.3
emacs-common
Red Hat:enterprise_linux:10.2
From an advisory covering 3 CVEs
 before 1:29.4-14.el10_2.3
1:29.4-14.el10_2.3
emacs-common-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 3 CVEs
 before 1:29.4-14.el10_2.3
1:29.4-14.el10_2.3
emacs-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 3 CVEs
 before 1:29.4-14.el10_2.3
1:29.4-14.el10_2.3
emacs-debugsource
Red Hat:enterprise_linux:10.2
From an advisory covering 3 CVEs
 before 1:29.4-14.el10_2.3
1:29.4-14.el10_2.3
emacs-gtk+x11-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 3 CVEs
 before 1:29.4-14.el10_2.3
1:29.4-14.el10_2.3
emacs-lucid
Red Hat:enterprise_linux:10.2
From an advisory covering 3 CVEs
 before 1:29.4-14.el10_2.3
1:29.4-14.el10_2.3
emacs-lucid-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 3 CVEs
 before 1:29.4-14.el10_2.3
1:29.4-14.el10_2.3
emacs-nw
Red Hat:enterprise_linux:10.2
From an advisory covering 3 CVEs
 before 1:29.4-14.el10_2.3
1:29.4-14.el10_2.3
emacs-nw-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 3 CVEs
 before 1:29.4-14.el10_2.3
1:29.4-14.el10_2.3
emacs-filesystem
Red Hat:enterprise_linux:10.2
From an advisory covering 3 CVEs
 before 1:29.4-14.el10_2.3
1:29.4-14.el10_2.3
emacs
Red Hat:enterprise_linux:9::appstream
 before 1:27.2-18.el9_8.3
1:27.2-18.el9_8.3
emacs-common
Red Hat:enterprise_linux:9::appstream
 before 1:27.2-18.el9_8.3
1:27.2-18.el9_8.3
emacs-common-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 1:27.2-18.el9_8.3
1:27.2-18.el9_8.3
emacs-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 1:27.2-18.el9_8.3
1:27.2-18.el9_8.3
emacs-debugsource
Red Hat:enterprise_linux:9::appstream
 before 1:27.2-18.el9_8.3
1:27.2-18.el9_8.3
emacs-filesystem
Red Hat:enterprise_linux:9::appstream
 before 1:27.2-18.el9_8.3
1:27.2-18.el9_8.3
emacs-lucid
Red Hat:enterprise_linux:9::appstream
 before 1:27.2-18.el9_8.3
1:27.2-18.el9_8.3
emacs-lucid-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 1:27.2-18.el9_8.3
1:27.2-18.el9_8.3
emacs-nox
Red Hat:enterprise_linux:9::appstream
 before 1:27.2-18.el9_8.3
1:27.2-18.el9_8.3
emacs-nox-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 1:27.2-18.el9_8.3
1:27.2-18.el9_8.3
emacs
Rocky Linux:10
From an advisory covering 3 CVEs
 before 1:29.4-14.el10_2.3
1:29.4-14.el10_2.3
emacs
Rocky Linux:9
 before 1:27.2-18.el9_8.3
1:27.2-18.el9_8.3
emacs
Rocky Linux:8
 before 1:26.1-15.el8_10.4
1:26.1-15.el8_10.4
emacs
SUSE:Linux Enterprise Server 16.0
 before 30.2-160000.4.1
30.2-160000.4.1
emacs
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 30.2-160000.4.1
30.2-160000.4.1
emacs
SUSE:Linux Enterprise Module for Basesystem 15 SP7
 before 27.2-150400.3.34.1
27.2-150400.3.34.1
emacs
SUSE:Linux Enterprise Module for Desktop Applications 15 SP7
 before 27.2-150400.3.34.1
27.2-150400.3.34.1
emacs
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 27.2-150400.3.34.1
27.2-150400.3.34.1
emacs
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 27.2-150400.3.34.1
27.2-150400.3.34.1
emacs
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
 before 27.2-150400.3.34.1
27.2-150400.3.34.1
emacs
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
 before 27.2-150400.3.34.1
27.2-150400.3.34.1
emacs
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 27.2-150400.3.34.1
27.2-150400.3.34.1
emacs
SUSE:Linux Enterprise Server 15 SP5-LTSS
 before 27.2-150400.3.34.1
27.2-150400.3.34.1
emacs
SUSE:Linux Enterprise Server 15 SP6-LTSS
 before 27.2-150400.3.34.1
27.2-150400.3.34.1
emacs
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 27.2-150400.3.34.1
27.2-150400.3.34.1
emacs
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
 before 27.2-150400.3.34.1
27.2-150400.3.34.1
emacs
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
 before 27.2-150400.3.34.1
27.2-150400.3.34.1
emacs24
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
24.5+1-1ubuntu224.5+1-1ubuntu424.5+1-1ubuntu524.5+1-1ubuntu624.5+1-1ubuntu7
Show 6 moreShow less
24.5+1-6ubuntu124.5+1-6ubuntu1.124.5+1-6ubuntu1.1+esm124.5+1-6ubuntu1.1+esm224.5+1-6ubuntu1.1+esm324.5+1-6ubuntu1.1+esm4
 None known
xemacs21
Ubuntu:16.04:LTS
 All versions, plus listed versions
21.4.22-4ubuntu321.4.22-14ubuntu1
 None known
xemacs21-packages
Ubuntu:16.04:LTS
 All versions, plus listed versions
2009.02.17.dfsg.2-2
 None known
emacs25
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
25.2+1-625.2+1-6ubuntu0.1~esm2
 None known
xemacs21
Ubuntu:18.04:LTS
 All versions, plus listed versions
21.4.24-4ubuntu121.4.24-5ubuntu1
 None known
xemacs21-packages
Ubuntu:18.04:LTS
 All versions, plus listed versions
2009.02.17.dfsg.2-4
 None known
emacs
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
1:26.3+1-1ubuntu11:26.3+1-1ubuntu21:26.3+1-1ubuntu2+esm11:26.3+1-1ubuntu2+esm2
 None known
xemacs21
Ubuntu:20.04:LTS
 All versions, plus listed versions
21.4.24-8build121.4.24-9
 None known
xemacs21-packages
Ubuntu:20.04:LTS
 All versions, plus listed versions
2009.02.17.dfsg.2-42009.02.17.dfsg.2-5
 None known
xemacs21
Ubuntu:22.04:LTS
 All versions, plus listed versions
21.4.24-9ubuntu2
 None known
xemacs21-packages
Ubuntu:22.04:LTS
 All versions, plus listed versions
2009.02.17.dfsg.2-5
 None known
emacs
Ubuntu:Pro:22.04:LTS
 All versions, plus listed versions
1:27.1+1-3ubuntu31:27.1+1-3ubuntu51:27.1+1-3ubuntu5.11:27.1+1-3ubuntu5.21:27.1+1-3ubuntu5.2+esm1
 None known
xemacs21
Ubuntu:24.04:LTS
 All versions, plus listed versions
21.4.24-1221.4.24-12build221.4.24-12build3
 None known
xemacs21-packages
Ubuntu:24.04:LTS
 All versions, plus listed versions
2009.02.17.dfsg.3-22009.02.17.dfsg.3-3
 None known
emacs
Ubuntu:Pro:24.04:LTS
 All versions, plus listed versions
1:29.1+1-5ubuntu11:29.2+1-1ubuntu11:29.2+1-2ubuntu41:29.3+1-1ubuntu21:29.3+1-1ubuntu2+esm11:29.3+1-1ubuntu2+esm31:29.3+1-1ubuntu2+esm4
 None known
emacs
Ubuntu:26.10
 All versions, plus listed versions
1:30.2+1-2ubuntu11:30.2+1-6ubuntu11:30.2+1-11ubuntu1
 None known
xemacs21
Ubuntu:26.10
 All versions, plus listed versions
21.4.24-12build3
 None known
xemacs21-packages
Ubuntu:26.10
 All versions, plus listed versions
2009.02.17.dfsg.3-3build1
 None known
xemacs21
Ubuntu:26.04:LTS
 All versions, plus listed versions
21.4.24-12build3
 None known
xemacs21-packages
Ubuntu:26.04:LTS
 All versions, plus listed versions
2009.02.17.dfsg.3-32009.02.17.dfsg.3-3build1
 None known
emacs
Ubuntu:Pro:26.04:LTS
 All versions, plus listed versions
1:30.1+1-9ubuntu11:30.2+1-1ubuntu21:30.2+1-2ubuntu11:30.2+1-2ubuntu1+esm1
 None known
emacs
openSUSE:Tumbleweed
 before 31.1-4.1
31.1-4.1
emacs
openSUSE:Leap 16.0
 before 30.2-160000.4.1
30.2-160000.4.1

History

History
RecordedChangedSources
affectedNVD, OSV
factsEUVD, OSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-96442 is a high vulnerability (CVSS 7.8) in Gnu Emacs Emacs, published September 23, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.20%, the 10th percentile. Fixed in emacs 1:27.2-18.el9_8.3.

References

Show 42 moreShow less
This page doesn't list everything

Left out here: 3 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open