CVE-2026-6861
Emacs: emacs: memory corruption vulnerability when processing svg css
A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG (Scalable Vector Graphics) CSS (Cascading Style Sheets) data. A local user could exploit this by convincing a victim to open a malicious SVG file, which may lead to a denial of service (DoS) or potentially information disclosure.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Emacs: emacs: memory corruption vulnerability when processing svg css
A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG (Scalable Vector Graphics) CSS (Cascading Style Sheets) data. A local user could exploit this by convincing a victim to open a malicious SVG file, which may lead to a denial of service (DoS) or potentially information disclosure.
- Record
CVE-2026-6861- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H - Weakness
- CWE-193
- Updated
- 2026-11-05
EUVDEUVD-2026-24955
A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG (Scalable Vector Graphics) CSS (Cascading Style Sheets) data. A local user could exploit this by convincing a victim to open a malicious SVG file, which may lead to a denial of service (DoS) or potentially information disclosure.
- Record
EUVD-2026-24955- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H - Updated
- 2026-11-06
GitHub AdvisoriesGHSA-w658-hxq6-43mx
A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs...
A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG (Scalable Vector Graphics) CSS (Cascading Style Sheets) data. A local user could exploit this by convincing a victim to open a malicious SVG file, which may lead to a denial of service (DoS) or potentially information disclosure.
- Record
GHSA-w658-hxq6-43mx- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H - Weakness
- CWE-193
- Updated
- 2026-11-02
NVD
A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG (Scalable Vector Graphics) CSS (Cascading Style Sheets) data. A local user could exploit this by convincing a victim to open a malicious SVG file, which may lead to a denial of service (DoS) or potentially information disclosure.
- Record
CVE-2026-6861- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H - CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H - Weakness
- CWE-193
- Updated
- 2026-11-06
OSVDEBIAN-CVE-2026-6861
A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG (Scalable Vector Graphics) CSS (Cascading Style Sheets) data. A local user could exploit this by convincing a victim to open a malicious SVG file, which may lead to a denial of service (DoS) or potentially information disclosure.
- Record
DEBIAN-CVE-2026-6861- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2026-2129
emacs security update
Emacs is the extensible, customizable, self-documenting real-time display editor. At its core is an interpreter for Emacs Lisp, a dialect of the Lisp programming language with extensions to support text editing. And it is an entire ecosystem of functionality beyond text editing, including a project planner, mail and news reader, debugger interface, calendar, and more.
Security Fix(es):
A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG (Scalable Vector Graphics) CSS (Cascading Style Sheets) data. A local user could exploit this by convincing a victim to open a malicious SVG file, which may lead to a denial of service (DoS) or potentially information disclosure.(CVE-2026-6861)
- Record
OESA-2026-2129- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H - Updated
- 2026-11-02
Show 9 moreShow less
OSVOESA-2026-2130
emacs security update
Emacs is the extensible, customizable, self-documenting real-time display editor. At its core is an interpreter for Emacs Lisp, a dialect of the Lisp programming language with extensions to support text editing. And it is an entire ecosystem of functionality beyond text editing, including a project planner, mail and news reader, debugger interface, calendar, and more.
Security Fix(es):
A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG (Scalable Vector Graphics) CSS (Cascading Style Sheets) data. A local user could exploit this by convincing a victim to open a malicious SVG file, which may lead to a denial of service (DoS) or potentially information disclosure.(CVE-2026-6861)
- Record
OESA-2026-2130- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H - Updated
- 2026-11-02
OSVOESA-2026-2131
emacs security update
Emacs is the extensible, customizable, self-documenting real-time display editor. At its core is an interpreter for Emacs Lisp, a dialect of the Lisp programming language with extensions to support text editing. And it is an entire ecosystem of functionality beyond text editing, including a project planner, mail and news reader, debugger interface, calendar, and more.
Security Fix(es):
A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG (Scalable Vector Graphics) CSS (Cascading Style Sheets) data. A local user could exploit this by convincing a victim to open a malicious SVG file, which may lead to a denial of service (DoS) or potentially information disclosure.(CVE-2026-6861)
- Record
OESA-2026-2131- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-6861
A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG (Scalable Vector Graphics) CSS (Cascading Style Sheets) data. A local user could exploit this by convincing a victim to open a malicious SVG file, which may lead to a denial of service (DoS) or potentially information disclosure.
- Record
UBUNTU-CVE-2026-6861- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H - CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVAZL-84638 No score
CVE-2026-6861 affecting package emacs for versions less than 29.4-4
A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG (Scalable Vector Graphics) CSS (Cascading Style Sheets) data. A local user could exploit this by convincing a victim to open a malicious SVG file, which may lead to a denial of service (DoS) or potentially information disclosure.
- Record
AZL-84638- Updated
- 2026-11-05
OSVMGASA-2026-0213 No score
Updated emacs packages fix security vulnerability
Memory corruption vulnerability when processing svg css. (CVE-2026-6861)
- Record
MGASA-2026-0213- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:10619-1 No score
emacs-30.2-8.1 on GA media
These are all security issues fixed in the emacs-30.2-8.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:10619-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:20759-1 No score
Security update for emacs
This update for emacs fixes the following issue:
- CVE-2026-6861: memory corruption when processing specially crafted SVG CSS data (bsc#1262611).
- Build with tree-sitter-0.26.8 security update (bsc#1262007).
- Record
openSUSE-SU-2026:20759-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:21801-1 No score
Security update for emacs
This update for emacs fixes the following issue:
- CVE-2026-6861: memory corruption when processing specially crafted SVG CSS data (bsc#1262611).
- Build with tree-sitter-0.26.8 security update (bsc#1262007).
- Record
SUSE-SU-2026:21801-1- Updated
- 2026-11-02
OSVUSN-8835-1 No score
emacs vulnerability
It was discovered that Emacs improperly handled specially crafted SVG images, resulting in memory corruption. An attacker could possibly use this issue to cause Emacs to crash, resulting in a denial of service, or obtain sensitive information.
- Record
USN-8835-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
emacsAzure Linux:3 |
before 29.4-4 | 29.4-4 |
emacsDebian:12 |
All versions, plus listed versions 1:28.2+1-151:28.2+1-15+deb12u11:28.2+1-15+deb12u21:28.2+1-15+deb12u31:28.2+1-15+deb12u4 Show 45 moreShow less1:28.2+1-161:29.1+1-11:29.1+1-21:29.1+1-31:29.1+1-41:29.1+1-51:29.1+1-5~bpo12+11:29.2+1-11:29.2+1-21:29.2+1-2~bpo12+11:29.3+1-11:29.3+1-21:29.3+1-2~bpo12+11:29.3+1-31:29.3+1-3~bpo12+11:29.4+1-11:29.4+1-21:29.4+1-2~bpo12+11:29.4+1-31:29.4+1-41:29.4+1-4~bpo12+11:29.4+1-51:29.4+1-61:29.4+1-6+alpha1:30.1+1-11:30.1+1-21:30.1+1-31:30.1+1-3~bpo12+11:30.1+1-41:30.1+1-4~bpo12+11:30.1+1-51:30.1+1-5~bpo12+11:30.1+1-61:30.1+1-6~bpo12+11:30.1+1-71:30.1+1-81:30.1+1-91:30.2+1-11:30.2+1-101:30.2+1-111:30.2+1-21:30.2+1-31:30.2+1-41:30.2+1-51:30.2+1-6 |
None known |
emacsDebian:13 |
before 1:30.1+1-6+deb13u1, plus listed versions 1:30.1+1-6 |
1:30.1+1-6+deb13u1 |
emacsDebian:14 |
before 1:30.2+1-3, plus listed versions 1:30.1+1-61:30.1+1-71:30.1+1-81:30.1+1-91:30.2+1-11:30.2+1-2 |
1:30.2+1-3 |
emacsMageia:9 |
before 29.4-1.4.mga9 | 29.4-1.4.mga9 |
emacsopenEuler:24.03-LTS-SP3 |
before 29.1-8.oe2403sp3 | 29.1-8.oe2403sp3 |
emacsopenEuler:24.03-LTS |
before 29.1-8.oe2403 | 29.1-8.oe2403 |
emacsopenEuler:24.03-LTS-SP1 |
before 29.1-8.oe2403sp1 | 29.1-8.oe2403sp1 |
xemacs21Ubuntu:16.04:LTS |
All versions, plus listed versions 21.4.22-4ubuntu321.4.22-14ubuntu1 |
None known |
xemacs21-packagesUbuntu:16.04:LTS |
All versions, plus listed versions 2009.02.17.dfsg.2-2 |
None known |
Show 20 moreShow less
| Package | Affected | Fixed |
|---|---|---|
emacs25Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 25.2+1-625.2+1-6ubuntu0.1~esm2 |
None known |
xemacs21Ubuntu:18.04:LTS |
All versions, plus listed versions 21.4.24-4ubuntu121.4.24-5ubuntu1 |
None known |
xemacs21-packagesUbuntu:18.04:LTS |
All versions, plus listed versions 2009.02.17.dfsg.2-4 |
None known |
xemacs21Ubuntu:20.04:LTS |
All versions, plus listed versions 21.4.24-8build121.4.24-9 |
None known |
xemacs21-packagesUbuntu:20.04:LTS |
All versions, plus listed versions 2009.02.17.dfsg.2-42009.02.17.dfsg.2-5 |
None known |
xemacs21Ubuntu:22.04:LTS |
All versions, plus listed versions 21.4.24-9ubuntu2 |
None known |
xemacs21-packagesUbuntu:22.04:LTS |
All versions, plus listed versions 2009.02.17.dfsg.2-5 |
None known |
xemacs21Ubuntu:24.04:LTS |
All versions, plus listed versions 21.4.24-1221.4.24-12build221.4.24-12build3 |
None known |
xemacs21-packagesUbuntu:24.04:LTS |
All versions, plus listed versions 2009.02.17.dfsg.3-22009.02.17.dfsg.3-3 |
None known |
emacsUbuntu:Pro:24.04:LTS |
before 1:29.3+1-1ubuntu2+esm4, plus listed versions 1:29.1+1-5ubuntu11:29.2+1-1ubuntu11:29.2+1-2ubuntu41:29.3+1-1ubuntu21:29.3+1-1ubuntu2+esm11:29.3+1-1ubuntu2+esm3 |
1:29.3+1-1ubuntu2+esm4 |
emacsUbuntu:25.10 |
All versions, plus listed versions 1:30.1+1-5ubuntu11:30.1+1-5ubuntu21:30.1+1-5ubuntu61:30.1+1-8ubuntu11:30.1+1-9ubuntu1 |
None known |
xemacs21Ubuntu:25.10 |
All versions, plus listed versions 21.4.24-12build3 |
None known |
xemacs21-packagesUbuntu:25.10 |
All versions, plus listed versions 2009.02.17.dfsg.3-3 |
None known |
emacsUbuntu:26.10 |
All versions, plus listed versions 1:30.2+1-2ubuntu11:30.2+1-6ubuntu11:30.2+1-11ubuntu1 |
None known |
xemacs21Ubuntu:26.10 |
All versions, plus listed versions 21.4.24-12build3 |
None known |
xemacs21-packagesUbuntu:26.10 |
All versions, plus listed versions 2009.02.17.dfsg.3-3build1 |
None known |
xemacs21Ubuntu:26.04:LTS |
All versions, plus listed versions 21.4.24-12build3 |
None known |
xemacs21-packagesUbuntu:26.04:LTS |
All versions, plus listed versions 2009.02.17.dfsg.3-32009.02.17.dfsg.3-3build1 |
None known |
emacsUbuntu:Pro:26.04:LTS |
before 1:30.2+1-2ubuntu1+esm1, plus listed versions 1:30.1+1-9ubuntu11:30.2+1-1ubuntu21:30.2+1-2ubuntu1 |
1:30.2+1-2ubuntu1+esm1 |
emacsopenSUSE:Tumbleweed |
before 30.2-8.1 | 30.2-8.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-6861 is a medium vulnerability (CVSS 6.1) in Gnu Emacs, published April 22, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.11%, the 1st percentile. Fixed in emacs 29.4-4.
References
access.redhat.com/security/cve/CVE-2026-6861
bugzilla.redhat.com/show_bug.cgi?id=2459992
nvd.nist.gov/vuln/detail/CVE-2026-6861
github.com/advisories/GHSA-w658-hxq6-43mx
security-tracker.debian.org/tracker/CVE-2026-6861
advisories.mageia.org/MGASA-2026-0213.html
Show 13 moreShow less
bugs.mageia.org/show_bug.cgi?id=35444
lists.opensuse.org/archives/list/[email protected]/message/FVUC2CPLVVKZQ7WKCK25ML7H6WGQDCO7
debbugs.gnu.org/80851
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2026-2129
suse.com/support/update/announcement/2026/suse-su-202621801-1
bugzilla.suse.com/1262007
ubuntu.com/security/CVE-2026-6861
cve.org/CVERecord?id=CVE-2026-6861
Left out here: 3 versions. The JSON record has them.