{"id":"CVE-2026-6861","aliases":["AZL-84638","DEBIAN-CVE-2026-6861","EUVD-2026-24955","GHSA-w658-hxq6-43mx","MGASA-2026-0213","OESA-2026-2129","OESA-2026-2130","OESA-2026-2131","SUSE-SU-2026:21801-1","UBUNTU-CVE-2026-6861","USN-8835-1","openSUSE-SU-2026:10619-1","openSUSE-SU-2026:20759-1"],"status":"published","title":"Emacs: emacs: memory corruption vulnerability when processing svg css","description":"A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG (Scalable Vector Graphics) CSS (Cascading Style Sheets) data. A local user could exploit this by convincing a victim to open a malicious SVG file, which may lead to a denial of service (DoS) or potentially information disclosure.","severity":{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00108,"percentile":0.01202,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-193"],"published":"2026-04-22T13:39:40Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Azure Linux:3","package":"emacs","fixed_in":["29.4-4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"emacs","fixed_in":["1:30.1+1-6+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"emacs","fixed_in":["1:30.2+1-3"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"emacs","fixed_in":["29.4-1.4.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"emacs","fixed_in":["29.1-8.oe2403sp3"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"emacs","fixed_in":["29.1-8.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"emacs","fixed_in":["29.1-8.oe2403sp1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:24.04:LTS","package":"emacs","fixed_in":["1:29.3+1-1ubuntu2+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:26.04:LTS","package":"emacs","fixed_in":["1:30.2+1-2ubuntu1+esm1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"emacs","fixed_in":["30.2-8.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"29.4-4"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:28.2+1-15","1:28.2+1-15+deb12u1","1:28.2+1-15+deb12u2","1:28.2+1-15+deb12u3","1:28.2+1-15+deb12u4","1:28.2+1-16","1:29.1+1-1","1:29.1+1-2","1:29.1+1-3","1:29.1+1-4","1:29.1+1-5","1:29.1+1-5~bpo12+1","1:29.2+1-1","1:29.2+1-2","1:29.2+1-2~bpo12+1","1:29.3+1-1","1:29.3+1-2","1:29.3+1-2~bpo12+1","1:29.3+1-3","1:29.3+1-3~bpo12+1","1:29.4+1-1","1:29.4+1-2","1:29.4+1-2~bpo12+1","1:29.4+1-3","1:29.4+1-4","1:29.4+1-4~bpo12+1","1:29.4+1-5","1:29.4+1-6","1:29.4+1-6+alpha","1:30.1+1-1","1:30.1+1-2","1:30.1+1-3","1:30.1+1-3~bpo12+1","1:30.1+1-4","1:30.1+1-4~bpo12+1","1:30.1+1-5","1:30.1+1-5~bpo12+1","1:30.1+1-6","1:30.1+1-6~bpo12+1","1:30.1+1-7","1:30.1+1-8","1:30.1+1-9","1:30.2+1-1","1:30.2+1-10","1:30.2+1-11","1:30.2+1-2","1:30.2+1-3","1:30.2+1-4","1:30.2+1-5","1:30.2+1-6","1:30.2+1-7","1:30.2+1-8","1:30.2+1-9"]},{"source":"osv","ecosystem":"Debian:13","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:30.1+1-6+deb13u1"}]}],"versions":["1:30.1+1-6"]},{"source":"osv","ecosystem":"Debian:14","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:30.2+1-3"}]}],"versions":["1:30.1+1-6","1:30.1+1-7","1:30.1+1-8","1:30.1+1-9","1:30.2+1-1","1:30.2+1-2"]},{"source":"osv","ecosystem":"Mageia:9","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"29.4-1.4.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"29.1-8.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"29.1-8.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"29.1-8.oe2403sp1"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"xemacs21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.4.22-4ubuntu3","21.4.22-14ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"xemacs21-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2009.02.17.dfsg.2-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"emacs25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["25.2+1-6","25.2+1-6ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"xemacs21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.4.24-4ubuntu1","21.4.24-5ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"xemacs21-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2009.02.17.dfsg.2-4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"xemacs21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.4.24-8build1","21.4.24-9"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"xemacs21-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2009.02.17.dfsg.2-4","2009.02.17.dfsg.2-5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"xemacs21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.4.24-9ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"xemacs21-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2009.02.17.dfsg.2-5"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"xemacs21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.4.24-12","21.4.24-12build2","21.4.24-12build3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"xemacs21-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2009.02.17.dfsg.3-2","2009.02.17.dfsg.3-3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:29.3+1-1ubuntu2+esm4"}]}],"versions":["1:29.1+1-5ubuntu1","1:29.2+1-1ubuntu1","1:29.2+1-2ubuntu4","1:29.3+1-1ubuntu2","1:29.3+1-1ubuntu2+esm1","1:29.3+1-1ubuntu2+esm3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:30.1+1-5ubuntu1","1:30.1+1-5ubuntu2","1:30.1+1-5ubuntu6","1:30.1+1-8ubuntu1","1:30.1+1-9ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"xemacs21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.4.24-12build3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"xemacs21-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2009.02.17.dfsg.3-3"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:30.2+1-2ubuntu1","1:30.2+1-6ubuntu1","1:30.2+1-11ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"xemacs21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.4.24-12build3"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"xemacs21-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2009.02.17.dfsg.3-3build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"xemacs21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.4.24-12build3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"xemacs21-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2009.02.17.dfsg.3-3","2009.02.17.dfsg.3-3build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:26.04:LTS","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:30.2+1-2ubuntu1+esm1"}]}],"versions":["1:30.1+1-9ubuntu1","1:30.2+1-1ubuntu2","1:30.2+1-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:29.3+1-1ubuntu2+esm4"}]}],"versions":["1:29.1+1-5ubuntu1","1:29.2+1-1ubuntu1","1:29.2+1-2ubuntu4","1:29.3+1-1ubuntu2","1:29.3+1-1ubuntu2+esm1","1:29.3+1-1ubuntu2+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:26.04:LTS","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:30.2+1-2ubuntu1+esm1"}]}],"versions":["1:30.1+1-9ubuntu1","1:30.2+1-1ubuntu2","1:30.2+1-2ubuntu1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30.2-8.1"}]}]}],"products":[{"vendor":"gnu","product":"emacs"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-6861","tags":["vdb-entry","x_refsource_REDHAT","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2459992","tags":["issue-tracking","x_refsource_REDHAT","Issue Tracking","Third Party Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6861","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-w658-hxq6-43mx"},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-6861","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0213.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35444","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/FVUC2CPLVVKZQ7WKCK25ML7H6WGQDCO7/","tags":["web"]},{"url":"https://debbugs.gnu.org/80851","tags":["web","report"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2129","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2130","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2131","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621801-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1262007","tags":["report"]},{"url":"https://bugzilla.suse.com/1262611","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6861","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2026-6861","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6861","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8835-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-6861","title":"Emacs: emacs: memory corruption vulnerability when processing svg css","description":"A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG (Scalable Vector Graphics) CSS (Cascading Style Sheets) data. A local user could exploit this by convincing a victim to open a malicious SVG file, which may lead to a denial of service (DoS) or potentially information disclosure.","status":"published","published":"2026-04-22T13:39:40.887Z","modified":"2026-11-05T22:49:05.853Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-193"],"updated_at":"2026-11-05T23:55:29.66083Z"}],"euvd":[{"id":"EUVD-2026-24955","description":"A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG (Scalable Vector Graphics) CSS (Cascading Style Sheets) data. A local user could exploit this by convincing a victim to open a malicious SVG file, which may lead to a denial of service (DoS) or potentially information disclosure.","status":"published","published":"2026-04-22T13:39:40Z","modified":"2026-11-05T22:49:05Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","level":"medium"}],"updated_at":"2026-11-06T00:02:32.983223Z"}],"ghsa":[{"id":"GHSA-w658-hxq6-43mx","title":"A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs...","description":"A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG (Scalable Vector Graphics) CSS (Cascading Style Sheets) data. A local user could exploit this by convincing a victim to open a malicious SVG file, which may lead to a denial of service (DoS) or potentially information disclosure.","status":"published","published":"2026-04-22T15:31:45Z","modified":"2026-04-22T15:31:57Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","level":"medium"}],"cwes":["CWE-193"],"updated_at":"2026-11-02T15:07:34.663272Z"}],"nvd":[{"id":"CVE-2026-6861","description":"A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG (Scalable Vector Graphics) CSS (Cascading Style Sheets) data. A local user could exploit this by convincing a victim to open a malicious SVG file, which may lead to a denial of service (DoS) or potentially information disclosure.","status":"published","published":"2026-04-22T14:17:07.86Z","modified":"2026-11-05T23:16:57.597Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-193"],"updated_at":"2026-11-06T01:57:38.479473Z"}],"osv":[{"id":"DEBIAN-CVE-2026-6861","description":"A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG (Scalable Vector Graphics) CSS (Cascading Style Sheets) data. A local user could exploit this by convincing a victim to open a malicious SVG file, which may lead to a denial of service (DoS) or potentially information disclosure.","status":"published","published":"2026-04-22T14:17:07.86Z","modified":"2026-10-27T09:47:37.903533259Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:46:02.094661Z"},{"id":"OESA-2026-2129","title":"emacs security update","description":"Emacs is the extensible, customizable, self-documenting real-time display editor. At its core is an interpreter for Emacs Lisp, a dialect of the Lisp programming language with extensions to support text editing. And it is an entire ecosystem of functionality beyond text editing, including a project planner, mail and news reader, debugger interface, calendar, and more.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG (Scalable Vector Graphics) CSS (Cascading Style Sheets) data. A local user could exploit this by convincing a victim to open a malicious SVG file, which may lead to a denial of service (DoS) or potentially information disclosure.(CVE-2026-6861)","status":"published","published":"2026-05-03T11:11:07Z","modified":"2026-08-18T01:19:50.162814845Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-2130","title":"emacs security update","description":"Emacs is the extensible, customizable, self-documenting real-time display editor. At its core is an interpreter for Emacs Lisp, a dialect of the Lisp programming language with extensions to support text editing. And it is an entire ecosystem of functionality beyond text editing, including a project planner, mail and news reader, debugger interface, calendar, and more.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG (Scalable Vector Graphics) CSS (Cascading Style Sheets) data. A local user could exploit this by convincing a victim to open a malicious SVG file, which may lead to a denial of service (DoS) or potentially information disclosure.(CVE-2026-6861)","status":"published","published":"2026-05-03T11:11:07Z","modified":"2026-08-18T01:19:49.846829569Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-2131","title":"emacs security update","description":"Emacs is the extensible, customizable, self-documenting real-time display editor. At its core is an interpreter for Emacs Lisp, a dialect of the Lisp programming language with extensions to support text editing. And it is an entire ecosystem of functionality beyond text editing, including a project planner, mail and news reader, debugger interface, calendar, and more.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG (Scalable Vector Graphics) CSS (Cascading Style Sheets) data. A local user could exploit this by convincing a victim to open a malicious SVG file, which may lead to a denial of service (DoS) or potentially information disclosure.(CVE-2026-6861)","status":"published","published":"2026-05-03T11:11:07Z","modified":"2026-08-18T01:19:50.037848772Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"UBUNTU-CVE-2026-6861","description":"A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG (Scalable Vector Graphics) CSS (Cascading Style Sheets) data. A local user could exploit this by convincing a victim to open a malicious SVG file, which may lead to a denial of service (DoS) or potentially information disclosure.","status":"published","published":"2026-04-22T14:17:00Z","modified":"2026-10-17T13:00:42.258621458Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","level":"medium"},{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:57.159276Z"},{"id":"AZL-84638","title":"CVE-2026-6861 affecting package emacs for versions less than 29.4-4","description":"A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG (Scalable Vector Graphics) CSS (Cascading Style Sheets) data. A local user could exploit this by convincing a victim to open a malicious SVG file, which may lead to a denial of service (DoS) or potentially information disclosure.","status":"published","published":"2026-04-22T14:17:07Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:24.988217Z"},{"id":"MGASA-2026-0213","title":"Updated emacs packages fix security vulnerability","description":"Memory corruption vulnerability when processing svg css. (CVE-2026-6861)\n","status":"published","published":"2026-06-16T04:58:51Z","modified":"2026-06-16T05:00:06.029649198Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2026:10619-1","title":"emacs-30.2-8.1 on GA media","description":"These are all security issues fixed in the emacs-30.2-8.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-04-26T00:00:00Z","modified":"2026-04-27T08:15:10.998292Z","updated_at":"2026-11-02T16:58:38.415593Z"},{"id":"openSUSE-SU-2026:20759-1","title":"Security update for emacs","description":"This update for emacs fixes the following issue:\n\n- CVE-2026-6861: memory corruption when processing specially crafted SVG CSS data (bsc#1262611).\n- Build with tree-sitter-0.26.8 security update (bsc#1262007).\n","status":"published","published":"2026-05-16T08:56:37Z","modified":"2026-05-19T18:23:48.999183242Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"SUSE-SU-2026:21801-1","title":"Security update for emacs","description":"This update for emacs fixes the following issue:\n\n- CVE-2026-6861: memory corruption when processing specially crafted SVG CSS data (bsc#1262611).\n- Build with tree-sitter-0.26.8 security update (bsc#1262007).\n","status":"published","published":"2026-05-16T08:54:55Z","modified":"2026-05-28T18:24:10.012357618Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"USN-8835-1","title":"emacs vulnerability","description":"It was discovered that Emacs improperly handled specially crafted SVG\nimages, resulting in memory corruption. An attacker could possibly use\nthis issue to cause Emacs to crash, resulting in a denial of service, or\nobtain sensitive information.","status":"published","published":"2026-09-28T14:33:51Z","modified":"2026-09-28T22:57:40.364849979Z","updated_at":"2026-11-02T16:58:26.907654Z"}]}}