{"id":"CVE-2026-96269","aliases":["ALSA-2026:90887","AZL-103410","DEBIAN-CVE-2026-96269","EUVD-2026-84868","GHSA-29x7-3q83-3x3v","RLSA-2026:90887","UBUNTU-CVE-2026-96269"],"status":"published","title":"GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an...","description":"GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the default configuration; no particular user settings are required to trigger it.","severity":{"version":"4.0","score":7.5,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00142,"percentile":0.03541,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-829"],"published":"2026-09-22T20:32:40Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"AlmaLinux:10","package":"emacs","fixed_in":["1:29.4-14.el10_2.4"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"emacs-common","fixed_in":["1:29.4-14.el10_2.4"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"emacs-filesystem","fixed_in":["1:29.4-14.el10_2.4"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"emacs-lucid","fixed_in":["1:29.4-14.el10_2.4"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"emacs-nw","fixed_in":["1:29.4-14.el10_2.4"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"emacs","fixed_in":["29.4-7"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"emacs","fixed_in":["1:30.1+1-6+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"emacs","fixed_in":["1:30.2+1-11"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"emacs","fixed_in":["1:29.4-14.el10_2.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:10","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:29.4-14.el10_2.4"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"emacs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:29.4-14.el10_2.4"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"emacs-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:29.4-14.el10_2.4"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"emacs-lucid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:29.4-14.el10_2.4"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"emacs-nw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:29.4-14.el10_2.4"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"29.4-7"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:28.2+1-15","1:28.2+1-15+deb12u1","1:28.2+1-15+deb12u2","1:28.2+1-15+deb12u3","1:28.2+1-15+deb12u4","1:28.2+1-16","1:29.1+1-1","1:29.1+1-2","1:29.1+1-3","1:29.1+1-4","1:29.1+1-5","1:29.1+1-5~bpo12+1","1:29.2+1-1","1:29.2+1-2","1:29.2+1-2~bpo12+1","1:29.3+1-1","1:29.3+1-2","1:29.3+1-2~bpo12+1","1:29.3+1-3","1:29.3+1-3~bpo12+1","1:29.4+1-1","1:29.4+1-2","1:29.4+1-2~bpo12+1","1:29.4+1-3","1:29.4+1-4","1:29.4+1-4~bpo12+1","1:29.4+1-5","1:29.4+1-6","1:29.4+1-6+alpha","1:30.1+1-1","1:30.1+1-2","1:30.1+1-3","1:30.1+1-3~bpo12+1","1:30.1+1-4","1:30.1+1-4~bpo12+1","1:30.1+1-5","1:30.1+1-5~bpo12+1","1:30.1+1-6","1:30.1+1-6~bpo12+1","1:30.1+1-7","1:30.1+1-8","1:30.1+1-9","1:30.2+1-1","1:30.2+1-10","1:30.2+1-11","1:30.2+1-2","1:30.2+1-3","1:30.2+1-4","1:30.2+1-5","1:30.2+1-6","1:30.2+1-7","1:30.2+1-8","1:30.2+1-9"]},{"source":"osv","ecosystem":"Debian:13","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:30.1+1-6+deb13u1"}]}],"versions":["1:30.1+1-6"]},{"source":"osv","ecosystem":"Debian:14","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:30.2+1-11"}]}],"versions":["1:30.1+1-6","1:30.1+1-7","1:30.1+1-8","1:30.1+1-9","1:30.2+1-1","1:30.2+1-10","1:30.2+1-2","1:30.2+1-3","1:30.2+1-4","1:30.2+1-5","1:30.2+1-6","1:30.2+1-7","1:30.2+1-8","1:30.2+1-9"]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:29.4-14.el10_2.4"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"emacs24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["24.5+1-1ubuntu2","24.5+1-1ubuntu4","24.5+1-1ubuntu5","24.5+1-1ubuntu6","24.5+1-1ubuntu7","24.5+1-6ubuntu1","24.5+1-6ubuntu1.1","24.5+1-6ubuntu1.1+esm1","24.5+1-6ubuntu1.1+esm2","24.5+1-6ubuntu1.1+esm3","24.5+1-6ubuntu1.1+esm4"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"xemacs21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.4.22-4ubuntu3","21.4.22-14ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"xemacs21-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2009.02.17.dfsg.2-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"emacs25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["25.2+1-6","25.2+1-6ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"xemacs21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.4.24-4ubuntu1","21.4.24-5ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"xemacs21-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2009.02.17.dfsg.2-4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:26.3+1-1ubuntu1","1:26.3+1-1ubuntu2","1:26.3+1-1ubuntu2+esm1","1:26.3+1-1ubuntu2+esm2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"xemacs21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.4.24-8build1","21.4.24-9"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"xemacs21-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2009.02.17.dfsg.2-4","2009.02.17.dfsg.2-5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"xemacs21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.4.24-9ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"xemacs21-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2009.02.17.dfsg.2-5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:27.1+1-3ubuntu3","1:27.1+1-3ubuntu5","1:27.1+1-3ubuntu5.1","1:27.1+1-3ubuntu5.2","1:27.1+1-3ubuntu5.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"xemacs21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.4.24-12","21.4.24-12build2","21.4.24-12build3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"xemacs21-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2009.02.17.dfsg.3-2","2009.02.17.dfsg.3-3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:29.1+1-5ubuntu1","1:29.2+1-1ubuntu1","1:29.2+1-2ubuntu4","1:29.3+1-1ubuntu2","1:29.3+1-1ubuntu2+esm1","1:29.3+1-1ubuntu2+esm3","1:29.3+1-1ubuntu2+esm4"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:30.2+1-2ubuntu1","1:30.2+1-6ubuntu1","1:30.2+1-11ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"xemacs21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.4.24-12build3"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"xemacs21-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2009.02.17.dfsg.3-3build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"xemacs21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.4.24-12build3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"xemacs21-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2009.02.17.dfsg.3-3","2009.02.17.dfsg.3-3build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:26.04:LTS","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:30.1+1-9ubuntu1","1:30.2+1-1ubuntu2","1:30.2+1-2ubuntu1","1:30.2+1-2ubuntu1+esm1"]}],"products":[{"vendor":"gnu","product":"emacs"},{"vendor":"microsoft","product":"emacs"}],"references":[{"url":"https://yhetil.org/emacs/jwvtsph1aoj.fsf-monnier+emacs@gnu.org/T/#m319545e835fb71d764bf868166632d4633167a75","tags":["report"]},{"url":"https://debbugs.gnu.org/cgi/bugreport.cgi?bug=80574#227","tags":["report"]},{"url":"https://eshelyaron.com/posts/2026-08-06-emacs-arbitrary-code-execution-returns.html","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2026/08/20/3","tags":["report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96269","tags":["web"]},{"url":"https://github.com/advisories/GHSA-29x7-3q83-3x3v"},{"url":"https://access.redhat.com/errata/RHSA-2026:90887","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-96269","tags":["report"]},{"url":"https://bugzilla.redhat.com/2538925","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-90887.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-96269","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:90887","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2538925","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-96269","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-96269","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-96269","description":"GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the default configuration; no particular user settings are required to trigger it.","status":"published","published":"2026-09-22T20:32:40.834Z","modified":"2026-09-24T01:51:40.685Z","cvss":[{"version":"4.0","score":7.5,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna"}],"cwes":["CWE-829"],"updated_at":"2026-11-02T14:20:00.511569Z"}],"euvd":[{"id":"EUVD-2026-84868","description":"GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the default configuration; no particular user settings are required to trigger it.","status":"published","published":"2026-09-22T20:32:40Z","modified":"2026-09-24T01:51:40Z","cvss":[{"version":"4.0","score":7.5,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T17:27:59.820483Z"}],"ghsa":[{"id":"GHSA-29x7-3q83-3x3v","title":"GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an...","description":"GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the default configuration; no particular user settings are required to trigger it.","status":"published","published":"2026-09-22T21:31:31Z","modified":"2026-09-24T03:31:29Z","cvss":[{"version":"4.0","score":7.5,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"cwes":["CWE-829"],"updated_at":"2026-11-02T15:12:21.685353Z"}],"nvd":[{"id":"CVE-2026-96269","description":"GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the default configuration; no particular user settings are required to trigger it.","status":"published","published":"2026-09-22T21:17:35.15Z","modified":"2026-09-24T21:00:46.893Z","cvss":[{"version":"4.0","score":7.5,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"}],"cwes":["CWE-829"],"updated_at":"2026-11-02T14:12:50.703874Z"}],"osv":[{"id":"DEBIAN-CVE-2026-96269","description":"GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the default configuration; no particular user settings are required to trigger it.","status":"published","published":"2026-09-22T21:17:35.15Z","modified":"2026-09-25T08:47:25.654707631Z","cvss":[{"version":"4.0","score":7.5,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"updated_at":"2026-11-02T15:46:07.324252Z"},{"id":"RLSA-2026:90887","title":"Important: emacs security update","description":"GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.\n\nSecurity Fix(es):\n\n* emacs: GNU Emacs: Arbitrary code execution upon opening a file (CVE-2026-96269)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-29T12:08:23.381701Z","modified":"2026-10-29T12:30:02.478198595Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"UBUNTU-CVE-2026-96269","description":"GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the default configuration; no particular user settings are required to trigger it.","status":"published","published":"2026-09-22T21:17:00Z","modified":"2026-10-17T13:01:19.600366172Z","cvss":[{"version":"4.0","score":7.5,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T16:57:44.071534Z"},{"id":"ALSA-2026:90887","title":"Important: emacs security update","description":"GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.  \n\nSecurity Fix(es):  \n\n  * emacs: GNU Emacs: Arbitrary code execution upon opening a file (CVE-2026-96269)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-27T00:00:00Z","modified":"2026-10-29T11:31:03.603325012Z","updated_at":"2026-11-02T15:27:57.367731Z"},{"id":"AZL-103410","title":"CVE-2026-96269 affecting package emacs for versions less than 29.4-7","description":"GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the default configuration; no particular user settings are required to trigger it.","status":"published","published":"2026-09-22T21:17:35Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:17.528763Z"}]}}