{"id":"CVE-2026-96442","aliases":["ALSA-2026:84591","ALSA-2026:85245","ALSA-2026:90800","AZL-103532","DEBIAN-CVE-2026-96442","EUVD-2026-85187","GHSA-hmfx-447r-rwh3","OESA-2026-4404","OESA-2026-4405","OESA-2026-4406","OESA-2026-4407","RHSA-2026:84591","RHSA-2026:85245","RLSA-2026:84591","RLSA-2026:85245","RLSA-2026:90800","SUSE-SU-2026:23949-1","SUSE-SU-2026:4594-1","UBUNTU-CVE-2026-96442","openSUSE-SU-2026:11889-1","openSUSE-SU-2026:21974-1"],"status":"published","title":"Emacs: emacs: arbitrary code execution in flymake mode","description":"A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution with the privileges of the user running Emacs.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00201,"percentile":0.10117,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-94"],"published":"2026-09-23T10:10:36Z","modified":"2026-11-12T06:31:25Z","fixes":[{"ecosystem":"AlmaLinux:9","package":"emacs","fixed_in":["1:27.2-18.el9_8.3"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"emacs-common","fixed_in":["1:27.2-18.el9_8.3"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"emacs-filesystem","fixed_in":["1:27.2-18.el9_8.3"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"emacs-lucid","fixed_in":["1:27.2-18.el9_8.3"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"emacs-nox","fixed_in":["1:27.2-18.el9_8.3"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"emacs","fixed_in":["1:26.1-15.el8_10.4"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"emacs-common","fixed_in":["1:26.1-15.el8_10.4"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"emacs-filesystem","fixed_in":["1:26.1-15.el8_10.4"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"emacs-lucid","fixed_in":["1:26.1-15.el8_10.4"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"emacs-nox","fixed_in":["1:26.1-15.el8_10.4"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"emacs-terminal","fixed_in":["1:26.1-15.el8_10.4"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"emacs","fixed_in":["29.4-7"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"emacs","fixed_in":["27.2-20.oe2203sp4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"emacs","fixed_in":["1:27.2-18.el9_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"emacs-common","fixed_in":["1:27.2-18.el9_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"emacs-common-debuginfo","fixed_in":["1:27.2-18.el9_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"emacs-debuginfo","fixed_in":["1:27.2-18.el9_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"emacs-debugsource","fixed_in":["1:27.2-18.el9_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"emacs-filesystem","fixed_in":["1:27.2-18.el9_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"emacs-lucid","fixed_in":["1:27.2-18.el9_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"emacs-lucid-debuginfo","fixed_in":["1:27.2-18.el9_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"emacs-nox","fixed_in":["1:27.2-18.el9_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"emacs-nox-debuginfo","fixed_in":["1:27.2-18.el9_8.3"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"emacs","fixed_in":["1:27.2-18.el9_8.3"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"emacs","fixed_in":["1:26.1-15.el8_10.4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"emacs","fixed_in":["30.2-160000.4.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"emacs","fixed_in":["30.2-160000.4.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"emacs","fixed_in":["27.2-150400.3.34.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"emacs","fixed_in":["27.2-150400.3.34.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"emacs","fixed_in":["27.2-150400.3.34.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"emacs","fixed_in":["27.2-150400.3.34.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"emacs","fixed_in":["27.2-150400.3.34.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"emacs","fixed_in":["27.2-150400.3.34.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"emacs","fixed_in":["27.2-150400.3.34.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"emacs","fixed_in":["27.2-150400.3.34.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"emacs","fixed_in":["27.2-150400.3.34.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"emacs","fixed_in":["27.2-150400.3.34.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"emacs","fixed_in":["27.2-150400.3.34.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"emacs","fixed_in":["27.2-150400.3.34.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"emacs","fixed_in":["31.1-4.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 16.0","package":"emacs","fixed_in":["30.2-160000.4.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:10","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:29.4-14.el10_2.3"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:10","package":"emacs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:29.4-14.el10_2.3"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:10","package":"emacs-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:29.4-14.el10_2.3"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:10","package":"emacs-lucid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:29.4-14.el10_2.3"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:10","package":"emacs-nw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:29.4-14.el10_2.3"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:27.2-18.el9_8.3"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"emacs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:27.2-18.el9_8.3"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"emacs-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:27.2-18.el9_8.3"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"emacs-lucid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:27.2-18.el9_8.3"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"emacs-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:27.2-18.el9_8.3"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:26.1-15.el8_10.4"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"emacs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:26.1-15.el8_10.4"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"emacs-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:26.1-15.el8_10.4"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"emacs-lucid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:26.1-15.el8_10.4"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"emacs-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:26.1-15.el8_10.4"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"emacs-terminal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:26.1-15.el8_10.4"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"29.4-7"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:28.2+1-15","1:28.2+1-15+deb12u1","1:28.2+1-15+deb12u2","1:28.2+1-15+deb12u3","1:28.2+1-15+deb12u4","1:28.2+1-16","1:29.1+1-1","1:29.1+1-2","1:29.1+1-3","1:29.1+1-4","1:29.1+1-5","1:29.1+1-5~bpo12+1","1:29.2+1-1","1:29.2+1-2","1:29.2+1-2~bpo12+1","1:29.3+1-1","1:29.3+1-2","1:29.3+1-2~bpo12+1","1:29.3+1-3","1:29.3+1-3~bpo12+1","1:29.4+1-1","1:29.4+1-2","1:29.4+1-2~bpo12+1","1:29.4+1-3","1:29.4+1-4","1:29.4+1-4~bpo12+1","1:29.4+1-5","1:29.4+1-6","1:29.4+1-6+alpha","1:30.1+1-1","1:30.1+1-2","1:30.1+1-3","1:30.1+1-3~bpo12+1","1:30.1+1-4","1:30.1+1-4~bpo12+1","1:30.1+1-5","1:30.1+1-5~bpo12+1","1:30.1+1-6","1:30.1+1-6~bpo12+1","1:30.1+1-7","1:30.1+1-8","1:30.1+1-9","1:30.2+1-1","1:30.2+1-10","1:30.2+1-11","1:30.2+1-2","1:30.2+1-3","1:30.2+1-4","1:30.2+1-5","1:30.2+1-6","1:30.2+1-7","1:30.2+1-8","1:30.2+1-9"]},{"source":"osv","ecosystem":"Debian:13","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:30.1+1-6","1:30.1+1-6+deb13u1","1:30.1+1-7","1:30.1+1-8","1:30.1+1-9","1:30.2+1-1","1:30.2+1-10","1:30.2+1-11","1:30.2+1-2","1:30.2+1-3","1:30.2+1-4","1:30.2+1-5","1:30.2+1-6","1:30.2+1-7","1:30.2+1-8","1:30.2+1-9"]},{"source":"osv","ecosystem":"Debian:14","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:30.1+1-6","1:30.1+1-7","1:30.1+1-8","1:30.1+1-9","1:30.2+1-1","1:30.2+1-10","1:30.2+1-11","1:30.2+1-2","1:30.2+1-3","1:30.2+1-4","1:30.2+1-5","1:30.2+1-6","1:30.2+1-7","1:30.2+1-8","1:30.2+1-9"]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"29.1-10.oe2403sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"29.1-11.oe2403sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.2-20.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"29.1-10.oe2403sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:29.4-14.el10_2.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"emacs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:29.4-14.el10_2.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"emacs-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:29.4-14.el10_2.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"emacs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:29.4-14.el10_2.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"emacs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:29.4-14.el10_2.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"emacs-gtk+x11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:29.4-14.el10_2.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"emacs-lucid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:29.4-14.el10_2.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"emacs-lucid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:29.4-14.el10_2.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"emacs-nw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:29.4-14.el10_2.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"emacs-nw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:29.4-14.el10_2.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"emacs-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:29.4-14.el10_2.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:27.2-18.el9_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"emacs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:27.2-18.el9_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"emacs-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:27.2-18.el9_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"emacs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:27.2-18.el9_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"emacs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:27.2-18.el9_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"emacs-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:27.2-18.el9_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"emacs-lucid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:27.2-18.el9_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"emacs-lucid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:27.2-18.el9_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"emacs-nox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:27.2-18.el9_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"emacs-nox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:27.2-18.el9_8.3"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:29.4-14.el10_2.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:9","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:27.2-18.el9_8.3"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:26.1-15.el8_10.4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30.2-160000.4.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30.2-160000.4.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.2-150400.3.34.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.2-150400.3.34.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.2-150400.3.34.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.2-150400.3.34.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.2-150400.3.34.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.2-150400.3.34.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.2-150400.3.34.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.2-150400.3.34.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.2-150400.3.34.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.2-150400.3.34.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.2-150400.3.34.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.2-150400.3.34.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"emacs24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["24.5+1-1ubuntu2","24.5+1-1ubuntu4","24.5+1-1ubuntu5","24.5+1-1ubuntu6","24.5+1-1ubuntu7","24.5+1-6ubuntu1","24.5+1-6ubuntu1.1","24.5+1-6ubuntu1.1+esm1","24.5+1-6ubuntu1.1+esm2","24.5+1-6ubuntu1.1+esm3","24.5+1-6ubuntu1.1+esm4"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"xemacs21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.4.22-4ubuntu3","21.4.22-14ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"xemacs21-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2009.02.17.dfsg.2-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"emacs25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["25.2+1-6","25.2+1-6ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"xemacs21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.4.24-4ubuntu1","21.4.24-5ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"xemacs21-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2009.02.17.dfsg.2-4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:26.3+1-1ubuntu1","1:26.3+1-1ubuntu2","1:26.3+1-1ubuntu2+esm1","1:26.3+1-1ubuntu2+esm2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"xemacs21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.4.24-8build1","21.4.24-9"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"xemacs21-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2009.02.17.dfsg.2-4","2009.02.17.dfsg.2-5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"xemacs21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.4.24-9ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"xemacs21-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2009.02.17.dfsg.2-5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:27.1+1-3ubuntu3","1:27.1+1-3ubuntu5","1:27.1+1-3ubuntu5.1","1:27.1+1-3ubuntu5.2","1:27.1+1-3ubuntu5.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"xemacs21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.4.24-12","21.4.24-12build2","21.4.24-12build3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"xemacs21-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2009.02.17.dfsg.3-2","2009.02.17.dfsg.3-3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:29.1+1-5ubuntu1","1:29.2+1-1ubuntu1","1:29.2+1-2ubuntu4","1:29.3+1-1ubuntu2","1:29.3+1-1ubuntu2+esm1","1:29.3+1-1ubuntu2+esm3","1:29.3+1-1ubuntu2+esm4"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:30.2+1-2ubuntu1","1:30.2+1-6ubuntu1","1:30.2+1-11ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"xemacs21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.4.24-12build3"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"xemacs21-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2009.02.17.dfsg.3-3build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"xemacs21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.4.24-12build3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"xemacs21-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2009.02.17.dfsg.3-3","2009.02.17.dfsg.3-3build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:26.04:LTS","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:30.1+1-9ubuntu1","1:30.2+1-1ubuntu2","1:30.2+1-2ubuntu1","1:30.2+1-2ubuntu1+esm1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"31.1-4.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"30.2-160000.4.1"}]}]}],"products":[{"vendor":"gnu emacs","product":"gnu emacs"},{"vendor":"open source","product":"gnu emacs"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:84591","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:85245","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:90800","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:98574","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:99160","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-96442","tags":["vdb-entry","x_refsource_REDHAT","report","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2537347","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://github.com/emacs-mirror/emacs/commit/135e6f63f08fee3d374fa1a5187bce941a2d3e3c","tags":["fix","article","report"]},{"url":"https://github.com/emacs-mirror/emacs/commit/abc802ee2eb0b1663349ddf22a461f8e54a383fb","tags":["fix","article","report"]},{"url":"https://www.openwall.com/lists/oss-security/2026/09/14/1","tags":["web","article","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96442","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-hmfx-447r-rwh3"},{"url":"https://access.redhat.com/security/cve/CVE-2026-77219","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-79992","tags":["report"]},{"url":"https://bugzilla.redhat.com/2521196","tags":["report"]},{"url":"https://bugzilla.redhat.com/2523665","tags":["report"]},{"url":"https://bugzilla.redhat.com/2537347","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-84591.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-85245.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-90800.html","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://git.savannah.gnu.org/cgit/emacs.git/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/96xxx/CVE-2026-96442.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-96442","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4404","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-79992","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4405","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4406","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4407","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2521196","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2523665","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_84591.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-77219","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77219","tags":["advisory"]},{"url":"https://debbugs.gnu.org/cgi/bugreport.cgi?bug=81344","tags":["article"]},{"url":"https://github.com/emacs-mirror/emacs/commit/b07e634e4cf45162ae0178e32092b040587f2c6c","tags":["article"]},{"url":"https://github.com/emacs-mirror/emacs/releases/tag/emacs-31.0.91","tags":["article"]},{"url":"https://www.vulncheck.com/advisories/gnu-emacs-heap-over-read-via-pbm-ppm-pgm-image-loader","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-79992","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-96442","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_85245.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:84591","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:85245","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:90800","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623949-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1282390","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-96442","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264594-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-96442","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-96442","title":"Emacs: emacs: arbitrary code execution in flymake mode","description":"A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution with the privileges of the user running Emacs.","status":"published","published":"2026-09-23T10:10:36.734Z","modified":"2026-11-12T05:26:44.065Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-94"],"updated_at":"2026-11-12T06:38:26.896586Z"}],"euvd":[{"id":"EUVD-2026-85187","description":"A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution with the privileges of the user running Emacs.","status":"published","published":"2026-09-23T10:10:36Z","modified":"2026-11-12T05:26:44Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-12T06:32:00.575845Z"}],"ghsa":[{"id":"GHSA-hmfx-447r-rwh3","title":"A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode...","description":"A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution with the privileges of the user running Emacs.","status":"published","published":"2026-09-23T12:31:15Z","modified":"2026-11-12T06:31:25Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-94"],"updated_at":"2026-11-12T06:38:20.494135Z"}],"nvd":[{"id":"CVE-2026-96442","description":"A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution with the privileges of the user running Emacs.","status":"published","published":"2026-09-23T11:17:18.55Z","modified":"2026-11-11T13:17:35.873Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-94"],"updated_at":"2026-11-11T15:25:15.031694Z"}],"osv":[{"id":"CVE-2026-96442","title":"Emacs: emacs: arbitrary code execution in flymake mode","description":"A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution with the privileges of the user running Emacs.","status":"published","published":"2026-09-23T10:10:36.734Z","modified":"2026-11-12T02:48:40.615851062Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-94"],"updated_at":"2026-11-12T03:30:37.008994Z"},{"id":"DEBIAN-CVE-2026-96442","description":"A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution with the privileges of the user running Emacs.","status":"published","published":"2026-09-23T11:17:18.55Z","modified":"2026-11-05T09:47:25.89801552Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-05T13:31:49.170436Z"},{"id":"OESA-2026-4404","title":"emacs security update","description":"Emacs is the extensible, customizable, self-documenting real-time display editor. At its core is an interpreter for Emacs Lisp, a dialect of the Lisp programming language with extensions to support text editing. And it is an entire ecosystem of functionality beyond text editing, including a project planner, mail and news reader, debugger interface, calendar, and more.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitrary code execution.(CVE-2026-79992)\n\nA code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution with the privileges of the user running Emacs.(CVE-2026-96442)","status":"published","published":"2026-10-16T12:00:14Z","modified":"2026-10-16T12:15:21.375050715Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"OESA-2026-4405","title":"emacs security update","description":"Emacs is the extensible, customizable, self-documenting real-time display editor. At its core is an interpreter for Emacs Lisp, a dialect of the Lisp programming language with extensions to support text editing. And it is an entire ecosystem of functionality beyond text editing, including a project planner, mail and news reader, debugger interface, calendar, and more.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitrary code execution.(CVE-2026-79992)\n\nA code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution with the privileges of the user running Emacs.(CVE-2026-96442)","status":"published","published":"2026-10-16T12:00:14Z","modified":"2026-10-16T12:15:21.271829309Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"OESA-2026-4406","title":"emacs security update","description":"Emacs is the extensible, customizable, self-documenting real-time display editor. At its core is an interpreter for Emacs Lisp, a dialect of the Lisp programming language with extensions to support text editing. And it is an entire ecosystem of functionality beyond text editing, including a project planner, mail and news reader, debugger interface, calendar, and more.\r\n\r\nSecurity Fix(es):\n\nA code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution with the privileges of the user running Emacs.(CVE-2026-96442)","status":"published","published":"2026-10-16T12:00:15Z","modified":"2026-10-16T12:15:20.422731639Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"OESA-2026-4407","title":"emacs security update","description":"Emacs is the extensible, customizable, self-documenting real-time display editor. At its core is an interpreter for Emacs Lisp, a dialect of the Lisp programming language with extensions to support text editing. And it is an entire ecosystem of functionality beyond text editing, including a project planner, mail and news reader, debugger interface, calendar, and more.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitrary code execution.(CVE-2026-79992)\n\nA code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution with the privileges of the user running Emacs.(CVE-2026-96442)","status":"published","published":"2026-10-16T12:00:16Z","modified":"2026-10-16T12:15:20.433104592Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"RHSA-2026:84591","title":"Red Hat Security Advisory: emacs security update","status":"published","published":"2026-10-19T10:08:05Z","modified":"2026-10-20T10:17:40Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RHSA-2026:85245","title":"Red Hat Security Advisory: emacs security update","status":"published","published":"2026-10-20T10:18:02Z","modified":"2026-10-20T10:31:43.069781196Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RLSA-2026:84591","title":"Important: emacs security update","description":"GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.\n\nSecurity Fix(es):\n\n* emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image (CVE-2026-77219)\n\n* emacs: emacs: Command injection via crafted filenames in TRAMP (CVE-2026-79992)\n\n* emacs: Emacs: arbitrary code execution in Flymake mode (CVE-2026-96442)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-20T12:10:14.939262Z","modified":"2026-10-20T12:15:37.45210559Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"RLSA-2026:85245","title":"Important: emacs security update","description":"GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.\n\nSecurity Fix(es):\n\n* emacs: Emacs: arbitrary code execution in Flymake mode (CVE-2026-96442)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-20T12:05:07.452289Z","modified":"2026-10-20T12:15:38.494740269Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"RLSA-2026:90800","title":"Important: emacs security update","description":"GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.\n\nSecurity Fix(es):\n\n* emacs: Emacs: arbitrary code execution in Flymake mode (CVE-2026-96442)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-29T12:00:52.140894Z","modified":"2026-10-29T12:30:02.477823087Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"UBUNTU-CVE-2026-96442","description":"A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution with the privileges of the user running Emacs.","status":"published","published":"2026-09-23T11:17:00Z","modified":"2026-10-17T13:01:19.893863574Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:57:44.071534Z"},{"id":"ALSA-2026:84591","title":"Important: emacs security update","description":"GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.  \n\nSecurity Fix(es):  \n\n  * emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image (CVE-2026-77219)\n  * emacs: emacs: Command injection via crafted filenames in TRAMP (CVE-2026-79992)\n  * emacs: Emacs: arbitrary code execution in Flymake mode (CVE-2026-96442)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-19T00:00:00Z","modified":"2026-10-29T11:31:02.015329626Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"ALSA-2026:85245","title":"Important: emacs security update","description":"GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.  \n\nSecurity Fix(es):  \n\n  * emacs: Emacs: arbitrary code execution in Flymake mode (CVE-2026-96442)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-19T00:00:00Z","modified":"2026-10-29T11:32:38.390891581Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"ALSA-2026:90800","title":"Important: emacs security update","description":"GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.  \n\nSecurity Fix(es):  \n\n  * emacs: Emacs: arbitrary code execution in Flymake mode (CVE-2026-96442)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-27T00:00:00Z","modified":"2026-10-29T11:02:25.433513815Z","updated_at":"2026-11-02T15:27:57.367731Z"},{"id":"AZL-103532","title":"CVE-2026-96442 affecting package emacs for versions less than 29.4-7","description":"A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution with the privileges of the user running Emacs.","status":"published","published":"2026-09-23T11:17:18Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:17.528763Z"},{"id":"openSUSE-SU-2026:11889-1","title":"emacs-31.1-4.1 on GA media","description":"These are all security issues fixed in the emacs-31.1-4.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-09-28T00:00:00Z","modified":"2026-09-29T18:23:22.313533911Z","updated_at":"2026-11-02T16:58:40.245664Z"},{"id":"openSUSE-SU-2026:21974-1","title":"Security update for emacs","description":"This update for emacs fixes the following issue:\n\n- CVE-2026-96442: arbitrary code execution when viewing or editing untrusted text files in modes other than Emacs Lisp\n  mode (bsc#1282390).\n","status":"published","published":"2026-09-29T17:10:50Z","modified":"2026-10-01T18:23:10.949304304Z","updated_at":"2026-11-02T16:58:42.426393Z"},{"id":"SUSE-SU-2026:23949-1","title":"Security update for emacs","description":"This update for emacs fixes the following issue:\n\n- CVE-2026-96442: arbitrary code execution when viewing or editing untrusted text files in modes other than Emacs Lisp\n  mode (bsc#1282390).\n","status":"published","published":"2026-09-29T17:39:51Z","modified":"2026-10-02T18:23:11.1087903Z","updated_at":"2026-11-02T15:54:03.991985Z"},{"id":"SUSE-SU-2026:4594-1","title":"Security update for emacs","description":"This update for emacs fixes the following issue:\n\n- CVE-2026-96442: arbitrary code execution when viewing or editing untrusted text files in modes other than Emacs Lisp\n  mode due to incomplete fix for CVE (bsc#1282390).\n","status":"published","published":"2026-10-08T14:24:32Z","modified":"2026-10-09T18:15:04.424134747Z","updated_at":"2026-11-02T15:54:05.838224Z"}]}}